IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution
Severity and exploitation
KEV coverage does not rule out exploitation.
Assessment vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSeverity
high8.8CVSS measures technical severity, not the likelihood of an attack.
Known exploitation
Not listed in the checked CISA KEV catalog
Absence from CISA KEV does not rule out attacks.
Public exploit
Not established by this record
Missing evidence does not mean no public exploit exists.
Remediation
Source guidance available
Review the recorded instructions. Guidance may be a workaround rather than a fixed version.
What this means
IBM Bob 1.0.4 through 2.0.1 may allow a remote attacker to inject arbitrary code due to improper control of user input code. The vulnerability is attributed to CWE-94, Improper Control of Generation of Code ('Code Injection').
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Attack conditions
No attack-condition excerpt has been identified here. Review the full source description and references for authentication, network access, and configuration requirements.
Review supporting sources →Affected versions
Check the exact model, release, and any platform requirements against your installation.
IBM · ibm
Bob Shell
1 range
IBM · ibm
Bob Shell
Compare with this publisher’s ranges. This does not inspect your installation.
affected
1.0.4 → through 2.0.1
semver versions
Other versions: unknown
Product identifiers (CPE)
cpe:2.3:a:ibm:bob:1.0.4:*:*:*:*:*:*:*cpe:2.3:a:ibm:bob:2.0.1:*:*:*:*:*:*:*What to do
Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.
IBM strongly recommends addressing the vulnerability now by upgrading to IBM Bob Shell V 2.0.2 or the later https://bob.ibm.com/docs/shell .
We recommend reviewing the documentation for guidance on installing IBM Bob https://bob.ibm.com/docs/ide/getting-started/install .
Until an upgrade can be applied, IBM recommends the following precautions:
Only use IBM Bob Shell with trusted repositories and trusted code sources.
Avoid opening repositories obtained from unknown or untrusted parties.
Review repository contents and configuration before use in shared or public environments.
Follow organizational security practices for validating and approving source code repositories.
Note: These mitigations reduce exposure but do not fully address the vulnerability. IBM recommends upgrading to IBM Bob Shell version 2.0.2 or later as the preferred remediation.
cve.new guidance unless attributed to a publisher. This page does not inspect your installation.
Public exploit evidence
No public exploit reference is identified in the imported evidence. This is not a claim that no exploit exists.
Original source description
Read the full publisher description
IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.
References
1 sourcesInside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-9764View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
Timeline
All times UTCAdvisory published
Publication date supplied by the source.
Source updated
Latest modification date supplied by the source.
Last imported by cve.new
Latest catalog import, not the date we first saw this advisory.
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.