Skip to content
OpenAdvisories

Package · PyPI

code-graph-rag

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.1
    CVE-2026-87008 Public exploit

    Code Graph RAG structural tools follow out-of-root symlinks

    Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.589, AstGrepService in codebase_rag/tools/ast_grep_service.py enumerates files beneath project_root and relies…

    vitali87 code-graph-rag code-graph-rag PyPI
  • High 7.5
    CVE-2026-77604

    Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read

    Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.345, the MCPToolsRegistry.read_file implementation in codebase_rag/mcp/tools.py joins attacker-controlled file…

    vitali87 code-graph-rag code-graph-rag PyPI