CVE-2026-88939: knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
project.setto a version that resolves this vulnerability.Fixed in 0.33.0Patch Authorization Bypass via project.set Bootstrap Exemption
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs a read-only agent session. The attack can be performed remotely with low complexity and does not require user interaction.
What access can an attacker gain?
By invoking project.set, an attacker can repoint the server to another project directory and obtain write-access capabilities.
Are read-only restrictions sufficient mitigation?
No. The project.set action is exempted unconditionally from permission guard checks, so read-only agent sessions can bypass those restrictions.