CVE-2026-22551
CVE-2026-22551
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs without restriction. Combined with prompt injection in a malicious workspace, an attacker could induce the AI agent to construct image URLs encoding sensitive information from the workspace or conversation context, exfiltrating it to attacker-controlled servers. The workspace trust enforcement introduced in v1.71.0 mitigates the documented attack chain by disabling AI features in untrusted workspaces.
CVSS 6.7 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
eclipse theia
- Versions
- ≥ 0, < 1.71.0: Affected (semver)
Update to 1.71.0
@theia/ai-chat-ui npm
- Affected ranges
- SEMVER: < 1.71.0
Update to 1.71.0
@theia/ai-chat npm
- Affected ranges
- SEMVER: < 1.71.0
Update to 1.71.0
@theia/ai-claude-code npm
- Affected ranges
- SEMVER: < 1.71.0
Update to 1.71.0
@theia/ai-code-completion npm
- Affected ranges
- SEMVER: < 1.71.0
Update to 1.71.0
@theia/ai-core npm
- Affected ranges
- SEMVER: < 1.71.0
Update to 1.71.0
@theia/ai-editor npm
- Affected ranges
- SEMVER: < 1.71.0
Update to 1.71.0
@theia/ai-ide npm
- Affected ranges
- SEMVER: < 1.71.0
Update to 1.71.0
eclipse Ubuntu:16.04:LTS
- Versions
- 3.8.1-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
eclipse Ubuntu:18.04:LTS
- Versions
- 3.8.1-10
- 3.8.1-11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published