{"id":"EUVD-2026-37899","enisaUuid":"972850d3-0bb8-3a35-92d9-c44d6cdbd042","description":"In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent\u0027s system prompts. An attacker could craft a malicious repository containing prompt template files that, when the workspace was opened in Theia, replaced the AI\u0027s system instructions with attacker-controlled content (indirect prompt injection). Combined with other AI chat features available in untrusted workspaces, this enabled attack chains leading to data exfiltration via Markdown image rendering or arbitrary command execution via task definitions.","datePublished":"Jun 18, 2026, 2:26:59 PM","dateUpdated":"Jun 19, 2026, 3:55:46 AM","baseScore":8.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/114\n","aliases":"CVE-2026-46580\nGHSA-m973-pr9r-hp2w\n","assigner":"eclipse","epss":0.51,"enisaIdProduct":[{"id":"677868b8-3ca0-3510-a4be-1575f4dd4b9b","product":{"name":"Eclipse Theia","vendor":{"name":"The Eclipse Foundation"}},"product_version":"0 \u003c1.71.0"}],"enisaIdVendor":[{"id":"56ac50f9-8ffc-3e63-99c5-03ef79443dc9","vendor":{"name":"Eclipse Foundation"}}],"enisaIdVulnerability":[{"id":"38f14010-7c10-3183-9605-f69b946cb465","vulnerability":{"id":"GHSA-m973-pr9r-hp2w","description":"[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat","datePublished":"Jun 18, 2026, 6:35:23 PM","dateUpdated":"Jun 19, 2026, 7:20:46 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-46580\nhttps://github.com/eclipse-theia/theia/issues/16892\nhttps://github.com/eclipse-theia/theia/pull/17364\nhttps://github.com/eclipse-theia/theia/commit/e3fdfe6992389bc5fa611058d00c39d7408508ed\nhttps://github.com/eclipse-theia/theia\nhttps://gitlab.eclipse.org/security/cve-assignment/-/work_items/114\n","enisa_id":"EUVD-2026-37899\n","aliases":"CVE-2026-46580\nGHSA-m973-pr9r-hp2w\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f10e73ec-13da-3c6b-abfe-3dbf5a7a0fc4","vulnerability":{"id":"CVE-2026-46580","description":"In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent\u0027s system prompts. An attacker could craft a malicious repository containing prompt template files that, when the workspace was opened in Theia, replaced the AI\u0027s system instructions with attacker-controlled content (indirect prompt injection). Combined with other AI chat features available in untrusted workspaces, this enabled attack chains leading to data exfiltration via Markdown image rendering or arbitrary command execution via task definitions.","datePublished":"Jun 18, 2026, 2:26:59 PM","dateUpdated":"Jun 19, 2026, 3:55:46 AM","status":"PUBLISHED","baseScore":8.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/114\n","enisa_id":"EUVD-2026-37899\n","assigner":"eclipse","epss":0.51,"dataProcessed":"Oct 28, 2026, 7:17:57 AM","vulnerabilityProduct":[{"id":"1b25ad50-4746-39f3-8ca3-936a03ac7f11","product":{"name":"Eclipse Theia","vendor":{"name":"The Eclipse Foundation"}},"product_version":"0 \u003c1.71.0"}],"vulnerabilityVendor":[{"id":"af975bd1-c8d3-3416-af93-972c9cd7f59a","vendor":{"name":"Eclipse Foundation"}}]}}],"enisaIdAdvisory":[]}