Am I affected by Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`? What should I do?

Question

The Cortex MCP server (`neuro-cortex-memory`) treats the `CLAUDE_PROJECT_DIR` environment variable as a trusted Cortex developer checkout.

Affected: neuro-cortex-memory <= 3.17.0. Fixed in: 3.18.0. What should you check, and what should you do about it?

Full incident page with sources: https://agentarmorhq.com/incidents/2026/07/cve-2026-49986-neuro-cortex-memory-cortex-mcp-server

AgentArmorHQ team · Accepted Answer

**Am I affected?**
Affected: neuro-cortex-memory <= 3.17.0. Fixed in: 3.18.0.
- Check your version: run `pip show neuro-cortex-memory`. Versions <= 3.17.0 of neuro-cortex-memory are affected.

**What to do now**
1. Upgrade to the fixed version: run `pip install --upgrade "neuro-cortex-memory>=3.18.0"` (first patched version 3.18.0).
2. Gate executable dev-source resolution behind an explicit opt-in flag so that only a developer who deliberately sets both `CORTEX_DEV_SOURCE_SYNC=1` and `CORTEX_DEV_ROOT` can trigger the bootstrap path

General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

**Sources**
- GitHub Advisory Database: https://github.com/advisories/GHSA-gvpp-v77h-5w8g

Full incident page: https://agentarmorhq.com/incidents/2026/07/cve-2026-49986-neuro-cortex-memory-cortex-mcp-server

Am I affected by Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`? What should I do?

1 answer

Add your answer or comment