CVE-2026-57860

Name of the Vulnerable Software and Affected Versions ForgeCode (affected versions not specified)

Description ForgeCode, an AI pair-programming CLI, automatically loads and executes Model Context Protocol (MCP) servers defined in a repository's .mcp.json file upon startup without requiring user confirmation. A malicious repository can contain a crafted .mcp.json file where the mcpServers entries specify arbitrary command and args values. When the CLI is executed within a cloned untrusted repository, these commands are spawned with the privileges of the invoking user, leading to arbitrary code execution. This issue serves as a mechanism for initial access and persistence against developers evaluating untrusted repositories.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.