UBUNTU-CVE-2026-22551

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-22551

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-22551.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-22551

Upstream

CVE-2026-22551

Published

2026-06-18T16:16:00Z

Modified

2026-06-24T11:01:29Z

Severity

6.7 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs without restriction. Combined with prompt injection in a malicious workspace, an attacker could induce the AI agent to construct image URLs encoding sensitive information from the workspace or conversation context, exfiltrating it to attacker-controlled servers. The workspace trust enforcement introduced in v1.71.0 mitigates the documented attack chain by disabling AI features in untrusted workspaces.

References

Affected packages

Ubuntu:16.04:LTS / eclipse

Package

Name: eclipse
Purl: pkg:deb/ubuntu/eclipse?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.8.1-8

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "eclipse",
            "binary_version": "3.8.1-8"
        },
        {
            "binary_name": "eclipse-jdt",
            "binary_version": "3.8.1-8"
        },
        {
            "binary_name": "eclipse-pde",
            "binary_version": "3.8.1-8"
        },
        {
            "binary_name": "eclipse-platform",
            "binary_version": "3.8.1-8"
        },
        {
            "binary_name": "eclipse-platform-data",
            "binary_version": "3.8.1-8"
        },
        {
            "binary_name": "eclipse-rcp",
            "binary_version": "3.8.1-8"
        },
        {
            "binary_name": "libequinox-osgi-java",
            "binary_version": "3.8.1-8"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-22551.json"

Ubuntu:18.04:LTS / eclipse