Skip to content
Threat Feed
Subscribe

Product

Bob (1.0.4-2.0.1)

1 brief RSS
high advisory

IBM Bob: Remote code execution via workspace-defined MCP server (CVE-2026-9764)

A remote code execution vulnerability exists in IBM Bob (versions 1.0.4 through 2.0.1) due to improper control of workspace-defined MCP servers and user input, which is now subject to public exploit code.

Bob cve-2026-9764 remote-code-execution ibm
1t 1c