CVE-2026-109440 LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode

High 8.7 Published 20 Oct 2026 Updated 22 Oct 2026

Exploited in the wild: Not known
Fix: None listed

What is CVE-2026-109440?

CVE-2026-109440 is a high-severity vulnerability in ginlix-ai LangAlpha, published on 20 Oct 2026.

Official description

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.

Weakness: CWE-1427

Which versions are affected by CVE-2026-109440?

How do I fix CVE-2026-109440?

No fix has been published for CVE-2026-109440 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-109440 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-109440 exists.

Sources

Also known as GHSA-fcmr-j7xj-36vp.