{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.132.1"}],"component":"@grackle-ai/auth","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-f9ff-5x35-7gfw","id":"tcs_01M5KFN5QXMVTH7YSVVMZKZB5P","modified_at":"2026-09-10T03:50:51.863072149Z","published_at":"2026-07-02T19:35:03Z","references":["https://osv.dev/vulnerability/GHSA-f9ff-5x35-7gfw","https://github.com/nick-pape/grackle/security/advisories/GHSA-f9ff-5x35-7gfw","https://github.com/nick-pape/grackle"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-f9ff-5x35-7gfw#npm/@grackle-ai/auth","url":"https://osv.dev/vulnerability/GHSA-f9ff-5x35-7gfw"}],"summary":"Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)"}