Is CVE-2026-86544 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86544?

CVE-2026-86544 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-86544

Description

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent calls.