GHSA-3jww-hxqj-wfq2
NoneCVSS
—
EPSS
—
Published
Jun 18, 2026
CISA due date
—
The record
[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @theia/ai-chat | 0 | 1.71.0 |
| npm | @theia/ai-chat-ui | 0 | 1.71.0 |
| npm | @theia/ai-claude-code | 0 | 1.71.0 |
| npm | @theia/ai-code-completion | 0 | 1.71.0 |
| npm | @theia/ai-core | 0 | 1.71.0 |
| npm | @theia/ai-editor | 0 | 1.71.0 |
| npm | @theia/ai-ide | 0 | 1.71.0 |
Related vulnerabilities
- CVE-2026-44688 In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and… Same vulnerability
- GHSA-m973-pr9r-hp2w [Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files… Also affects @theia/ai-chat
- GHSA-qwjm-9c66-w4q4 [Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat Also affects @theia/ai-chat
- CVE-2026-46580 In Eclipse Theia versions prior to 1.71.0, files matching the pattern… Also affects @theia/ai-chat
- CVE-2026-22551 In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from… Also affects @theia/ai-chat
- CVE-2026-114727 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content… CWE-829
- CVE-2026-0303 A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow… CWE-829
- CVE-2026-79721 Code execution can occur in versions of the MLflow platform running version 0.0.1 or… CWE-829