PT-2026-50691 · Eclipse Foundation · Eclipse Theia

Piotr Ryciak · Publicado 2026-06-18 · Atualizado 2026-06-18 · CVE-2026-46580

Mitre

CVSS v4.0

8.4

Alta

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent's system prompts. An attacker could craft a malicious repository containing prompt template files that, when the workspace was opened in Theia, replaced the AI's system instructions with attacker-controlled content (indirect prompt injection). Combined with other AI chat features available in untrusted workspaces, this enabled attack chains leading to data exfiltration via Markdown image rendering or arbitrary command execution via task definitions.

Correção

Enumeração de Fraquezas

CWE-1427

CWE-829

Identificadores relacionados

CVE-2026-46580

Produtos afetados

Eclipse Theia

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-46580 · Nota de Segurança
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/114 · Nota