CVE-2026-88755 Z.ai CVE debrief

Who should care

Defenders responsible for Z.ai ZCode deployments should verify repository configurations and MCP server connections to assess exposure. This includes reviewing current repository settings, restricting access to trusted sources, and monitoring logs for suspicious activity.

Why it matters

CVE-2026-88755 is a potential vulnerability in Z.ai ZCode v3.11.2.6792 that could allow attackers to execute arbitrary code via opening a crafted repository. Defenders should verify repository configurations, restrict access, and monitor logs to assess exposure and prevent potential exploitation.

• Verify repository configurations for MCP server connections to prevent potential exploitation
• Restrict repository access to trusted users and sources to reduce attack surface
• Monitor ZCode logs for suspicious MCP server connections to detect potential attacks
• Update ZCode to the latest version if available to ensure patched versions

Technical summary

CVE-2026-88755 is a potential vulnerability in Z.ai ZCode v3.11.2.6792. The vulnerability is related to the automatic establishment of connections with MCP servers declared inside a repository's workspace configuration. This could potentially allow attackers to execute arbitrary code via opening a crafted repository. The CVE Program and NIST NVD detail page provide limited information on this vulnerability. Defenders should verify repository configurations, restrict access, and monitor logs to assess exposure and prevent potential exploitation.

Defensive priority

Verify ZCode repository configurations and MCP server connections

Recommended defensive actions

• Verify ZCode repository configurations for MCP server connections
• Restrict repository access to trusted users and sources
• Monitor ZCode logs for suspicious MCP server connections
• Update ZCode to the latest version if available
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

Official CVE Program record and NIST NVD detail page provide limited information on CVE-2026-88755, a potential vulnerability in Z.ai ZCode v3.11.2.6792. The CVE description mentions automatic connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.