HIGHnpm
GHSA-f9ff-5x35-7gfwGrackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)
Modified: 9/10/2026
package
npm/@grackle-ai/plugin-core
pkg:npm/%40grackle-ai/plugin-core
package
pkg:npm/%40grackle-ai/plugin-core
Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)
Modified: 9/10/2026