Skip to content
Threat Feed
Subscribe

Vendor

Grackle AI

3 briefs RSS
high advisory

Grackle AI Runtime-SDK RCE via Git Worktree Command Injection

A command injection vulnerability (GHSA-vv65-f55v-xm6g) exists in Grackle AI's `@grackle-ai/runtime-sdk` and `@grackle-ai/powerline` components, allowing an attacker to achieve remote code execution as the PowerLine user on provisioned environments by injecting commands into unsanitized Git task branch names via the `SpawnSession` RPC.

@grackle-ai/runtime-sdk +1 command-injection rce supply-chain nodejs git
1r 2t
high advisory

Grackle AI MCP Tool Layer Fail-Open Authorization Leads to IDOR and Privilege Escalation (GHSA-f9ff-5x35-7gfw)

The Grackle AI MCP tool layer, specifically versions of `@grackle-ai/mcp`, `@grackle-ai/plugin-core`, and `@grackle-ai/auth` up to `0.132.1`, suffers from an authorization bypass (IDOR) due to inconsistent inline checks, allowing a compromised scoped agent to perform unauthorized cross-task and cross-session operations, leading to data manipulation, denial of service, and sensitive data disclosure across workspaces.

@grackle-ai/mcp +2 idor authorization-bypass privilege-escalation denial-of-service code-vulnerability software-component
3t
high advisory

@grackle-ai/mcp Workspace Authorization Bypass in knowledge_search MCP Tool

The @grackle-ai/mcp package has a workspace authorization bypass vulnerability in its knowledge_search MCP tool that allows scoped agents to bypass workspace isolation and access knowledge graph nodes from other workspaces, leading to cross-workspace data leakage.

@grackle-ai/mcp authorization-bypass data-leakage workspace-isolation
2r 2t