IBM Bob: Remote code execution via workspace-defined MCP server (CVE-2026-9764)
A remote code execution vulnerability exists in IBM Bob (versions 1.0.4 through 2.0.1) due to improper control of workspace-defined MCP servers and user input, which is now subject to public exploit code.
CVE search metadata
CVE search record: CVE-2026-9764. Severity: high. CVSS: 8.8. KEV: no. Product: Bob (1.0.4-2.0.1). Brief: IBM Bob: Remote code execution via workspace-defined MCP server (CVE-2026-9764). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cve-2026-9764/
Triage facts
Revision 1- Applicability
- Bob (1.0.4-2.0.1)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 3 public sources
- Freshness
- Revision 1Nov 8, 20:56 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- B2Likely
IBM Bob (versions 1.0.4 through 2.0.1) is vulnerable to a remote code execution vulnerability (CVE-2026-9764). The flaw arises from improper control of workspace-defined MCP servers, allowing an attacker to inject and execute arbitrary code. Successful exploitation requires network access and user interaction. IBM has published security guidance for this vulnerability.
Impact
Successful exploitation allows a remote attacker to achieve arbitrary code execution on the target system, resulting in a full compromise of confidentiality, integrity, and availability (CVSS 8.8).
Recommendation
- Review the official IBM security advisory for mitigation and patching details at the provided reference.
- Audit all instances of IBM Bob within the environment to identify versions 1.0.4 through 2.0.1.
- Prioritize the application of vendor-supplied patches to remediate CVE-2026-9764.
- Monitor network traffic for unusual outbound connections from the IBM Bob server, particularly those initiated following user interaction or workspace configuration changes.
Immediate actions
Identify and inventory all IBM Bob installations versions 1.0.4 through 2.0.1.
Threat Hunt
Hunt for child processes spawned by the IBM Bob server process (e.g., cmd.exe, /bin/sh) that indicate successful code injection.
Data: Endpoint process creation logs (Sysmon Event ID 1 or native audit)
Mitigations
Apply security patches provided by IBM for CVE-2026-9764.
CVE-2026-9764