RosmarOps

RosmarOps Observatory

Agent security today: 4 November 2026

What changed in the security of the AI coding agents we follow since the last check, from their official sources and public registries. Up to five changes a day, one line each, with its source. Days without changes are listed too.

  1. 3 November 2026 · CKAN MCP Server · CVE-2026-76894

    CVE-2026-76894, published in NVD on 3 November 2026, affects CKAN MCP Server before 0.4.112: its DataStore table interface accepts window messages without checking their origin.

    nvd.nist.gov

  2. 3 November 2026 · Claude Code · CVE-2026-88968

    CVE-2026-88968, published in NVD on 3 November 2026, affects Claude Code before 2.1.251 on macOS: code inside the Bash sandbox can make Edit overwrite files outside the workspace.

    nvd.nist.gov

  3. 3 November 2026 · SurrealDB · CVE-2026-121419

    CVE-2026-121419, published in NVD on 3 November 2026, affects SurrealDB from 3.1.0 before 3.3.0: its MCP sessions are tied to the access method, not the user.

    nvd.nist.gov

  4. 3 November 2026 · Instatic · CVE-2026-121458

    CVE-2026-121458, published in NVD on 3 November 2026, affects Instatic before 0.0.21: its MCP content read tools skip object-level authorization, exposing other users' rows.

    nvd.nist.gov

  5. 4 November 2026 · Claude Code

    Claude Code 2.1.318, dated 4 November 2026 in its changelog, now makes deniedMcpServers URL entries block matching Anthropic-provided servers and connectors in cloud sessions too.

    code.claude.com

Checked today: 27 of 28 sources. Not checked: Hermes Agent.

What we checked

From the vendors' official sources and public registries, each line with its date and source. Not a security guarantee or advice.