CVE-2026-82217

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-82217

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82217.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-82217

Published

2026-08-31T13:40:56.645Z

Modified

2026-09-04T03:45:44.816147825Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContent, and the replacement and state helpers) resolved a model-supplied file path without a workspace-containment check. A crafted relative path such as ../.bashrc, an absolute path, or a ~-expanded path could therefore write or delete files outside the workspace with the privileges of the Theia backend OS user. Because the path argument is influenced by model output, it can be steered through indirect prompt injection, and in Agent Mode writes are applied without a confirmation dialog. Writing to a host-executed file such as a shell startup file or ~/.ssh/authorized_keys can escalate to code execution on the backend.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82217.json",
    "cna_assigner": "eclipse",
    "cwe_ids": [
        "CWE-22"
    ]
}

References

Affected packages

Git / github.com/eclipse-theia/theia

Affected ranges

Type

GIT

Repo

https://github.com/eclipse-theia/theia

Events

Introduced

72573426f320fefc89a96ba55ce05c752d182123

Fixed

28da106c254

Database specific

Show details

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.73.0"
        },
        {
            "fixed": "1.75.0"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82217.json"