Z.ai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Z.ai CVE published 2026-10-16

CVE-2026-88755

CVE-2026-88755 is a potential vulnerability in Z.ai ZCode v3.11.2.6792 that could allow attackers to execute arbitrary code via opening a crafted repository. The vulnerability is related to the automatic establishment of connections with MCP servers declared inside a repository's workspace configuration. Defenders should verify repository configurations, restrict access, and monitor logs to assess exposur [truncated]