tailcallhq

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

tailcallhq records in CISA KEV

No tailcallhq vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-41664 CVE-2026-57860 · GHSA-6p2j-g97c-79wf

ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository

HIGH 72

ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP servers defined in a repository's .mcp.json file on startup without user confirmation.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00209 Published 2026-07-17 No fix listed CWE-829

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0