CVE-2026-44691
High · 8.8CVSS
8.8
EPSS
0.4%
Published
Jun 18, 2026
CISA due date
—
The record
In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitrary commands with the user's privileges. In combination with AI chat features and a workspace .theia/settings.json that disabled tool confirmation, this could be triggered automatically by sending a message in the AI chat.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @theia/debug | 0 | 1.69.0 |
| npm | @theia/task | 0 | 1.69.0 |
| npm | @theia/workspace | 0 | 1.69.0 |
Related vulnerabilities
- GHSA-g9jw-92q7-g7fj [Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions Same vulnerability
- CVE-2026-114727 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content… CWE-829
- CVE-2026-0303 A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow… CWE-829
- CVE-2026-79721 Code execution can occur in versions of the MLflow platform running version 0.0.1 or… CWE-829
- CVE-2026-86504 In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before… CWE-829
- CVE-2026-18252 GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before… CWE-829
- CVE-2026-76139 A flaw was found in acm-operator-bundle. CWE-829
- CVE-2026-22306 Download of code without integrity check, inclusion of functionality from untrusted… CWE-829