Threats tagged 'ghsa-2vx4-m2rp-32rx'

Z.ai ZCode version 3.11.2.6792 has a vulnerability where it automatically connects to MCP servers specified in a repository's workspace configuration. This behavior may allow attackers to execute arbitrary code by opening a specially crafted repository. The vulnerability has a high severity rating with a CVSS score of 7.8, indicating significant potential impact on confidentiality, integrity, and availability.