Tailcallhq vulnerabilities
We track 1 vulnerability in Tailcallhq products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Tailcallhq vulnerabilities
- 7.8 High severity
forgecode: Inclusion of Functionality from Untrusted Control Sphere
ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP servers defined in a repository's .mcp.json file on startup without user confirmation. A malicious repository can supply a crafted .mcp.json whose mcpServers