CVE catalog

CVE-2026-46580

In Eclipse Theia versions prior to 1.71.0, files…

[CVE catalog]

In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent's system prompts. An attacker could craft a malicious repository containing prompt template files that, when the workspace was opened in Theia, replaced the AI's system instructions with attacker-controlled content (indirect prompt injection). Combined with other AI chat features available in untrusted workspaces, this enabled attack chains leading to data exfiltration via Markdown image rendering or arbitrary command execution via task definitions.

Severity
High · CVSS 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.51% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntu18.04eclipse3.8.1-10Affected[UBUNTU-CVE-2026-46580]
Ubuntu18.04eclipse3.8.1-11Affected[UBUNTU-CVE-2026-46580]
Ubuntu16.04eclipse3.8.1-8Affected[UBUNTU-CVE-2026-46580]
UnknownRelease not reportedtheia1.71.0UnknownSource applicability is not establishedProvider not reported
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedtheia1.71.0UnknownSource applicability is not establishedProvider not reported
Ubuntu16.04eclipse3.8.1-8Affected[UBUNTU-CVE-2026-46580]
Ubuntu18.04eclipse3.8.1-10Affected[UBUNTU-CVE-2026-46580]
Ubuntu18.04eclipse3.8.1-11Affected[UBUNTU-CVE-2026-46580]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "theia",
      "fixed_version": "1.71.0",
      "applicability_unknown": true
    },
    {
      "name": "eclipse",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "3.8.1-8"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46580",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46580",
      "provider_updated_at": "2026-06-24T11:01:07.268451324Z"
    },
    {
      "name": "eclipse",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "3.8.1-10",
        "3.8.1-11"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46580",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46580",
      "provider_updated_at": "2026-06-24T11:01:07.268451324Z"
    },
    {
      "name": "theia",
      "ranges": [
        {
          "fixed": "1.71.0",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46580",
      "fixed_version": "1.71.0",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-46580",
      "provider_updated_at": "2026-10-26T11:10:00.157"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]