Security advisories

high2026-07-02

Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)

GHSA-f9ff-5x35-7gfw

high2026-07-02

Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)

GHSA-vv65-f55v-xm6g

low2026-03-25

@grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling

GHSA-8g29-8xwr-qmhr

low2026-03-25

@grackle-ai/server has a Missing Secure Flag on Session Cookie

GHSA-5j35-xr4g-vwf4

medium2026-03-25

@grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers

GHSA-3mjm-x6gw-2x42

medium2026-03-25

@grackle-ai/powerline Runs Without Authentication by Default

GHSA-xq7h-vwjp-5vrh

high2026-03-25

@grackle-ai/server has Missing WebSocket Origin Header Validation

GHSA-w3hv-x4fp-6h6j

high2026-03-25

@grackle-ai/mcp has a workspace authorization bypass in its knowledge_search MCP tool

GHSA-647h-p824-99w7

low2026-03-25

@grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template

GHSA-7q9x-8g6p-3x75