Live › vulnerability › CVE-2026-88755
Go to dashboardZCode v3.11.2.6792 automatically connects to MCP servers declared in a repository's workspace configuration without asking. A crafted repository can therefore lead an attacker to execute arbitrary code on the developer's machine when it is opened.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Developers who run ZCode v3.11.2.6792 and open repositories they did not write or fully trust. The exposure comes from the workspace configuration in the repository, so teams that only open their own vetted repositories face less risk. Teams not using ZCode can skip it.
No product ranges from the sources yet.
3.11.2.67923.11.2.6792 to a newer release once the vendor publishes one; the sources do not name a fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.
This page as .md · .json · in your agent: get_signal("CVE-2026-88755")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.