CVE-2026-86544

knowns versions before 0.30.0 contain an authorization bypass (CWE-863) in which mutating code actions are incorrectly classified as read-only operations. An attacker holding a read-restricted session can invoke the code.replace action to modify permission configurations, an operation that should require write-level privileges. Because those permission changes take effect on subsequent calls, the attacker escalates from read-only access to write and modification capabilities, consistent with the High integrity and availability impact ratings in the CVSS 4.0 score of 7.2. Any deployment running a knowns release prior to 0.30.0 is affected until it is upgraded. There is no known public proof-of-concept or in-the-wild exploitation, and EPSS estimates only about a 0.3% probability of exploitation within 30 days.

What to do: Upgrade to knowns 0.30.0 or later, which correctly classifies mutating actions such as code.replace as write operations. Until then, restrict issuance of read-restricted sessions to trusted users and monitor permission-configuration changes for unexpected edits made via code.replace. Audit recent session activity for privilege changes performed with read-only credentials.