CVE-2026-44691 [Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions
Attackers can execute arbitrary commands via malicious workspace files in Eclipse Theia, especially when AI chat features are enabled without confirmation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-44691?
CVE-2026-44691 is a high-severity code injection vulnerability in Eclipse Theia, published on 18 Jun 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitrary commands with the user's privileges. In combination with AI chat features and a workspace .theia/settings.json that disabled tool confirmation, this could be triggered automatically by sending a message in the AI chat.
Weakness: CWE-829
Which versions are affected by CVE-2026-44691?
6 open source packages ship an affected version, including @theia/debug, @theia/task and @theia/workspace. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
@theia/debug npm | All versions | 1.69.0 |
@theia/debug npm | All versions | 1.69.0 |
@theia/task npm | All versions | 1.69.0 |
@theia/task npm | All versions | 1.69.0 |
@theia/workspace npm | All versions | 1.69.0 |
@theia/workspace npm | All versions | 1.69.0 |
Products include Eclipse Theia.
How do I fix CVE-2026-44691?
Upgrade @theia/debug to 1.69.0 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-44691 being exploited?
There is no known exploitation of CVE-2026-44691 in the wild and no public exploit code.
Other vulnerabilities in Eclipse Theia
- CVE-2021-34436 XML external entity in Eclipse Theia
- CVE-2020-27224 Cross-site Scripting (XSS) in Eclipse Theia
- CVE-2026-60009 File upload in Eclipse Theia
- CVE-2021-34435 Remote code execution in Eclipse Theia
- CVE-2026-44688 [Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat
Sources
Also known as GHSA-g9jw-92q7-g7fj.