Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-5514

IBM Bob is vulnerable to unauthorized session token exposure due to improper handling of authentication provider session information

IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. The token is exposed in the account identifier field during account enumeration, without requiring explicit user consent. This may allow malicious extensions to access sensitive session information and potentially perform unauthorized actions on behalf of the user.

CVSS 3.1 · 3.3 Low EPSS n/a KEV · Not listed
Vendors
Ibm
Products
Bob
CVE-2026-9764

IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution

IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
Bob Bob Shell