Cve-2026-9764

A remote code execution vulnerability exists in IBM Bob (versions 1.0.4 through 2.0.1) due to improper control of workspace-defined MCP servers and user input, which is now subject to public exploit code.