{"data":{"id":"180e64c4-f630-44f4-aa61-cb1534f1859d","title":"CVE-2026-109440: LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to…","summary":"LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability. Remote attackers can plant instructions in web content the agent retrieves, causing it to run shell commands or Python. Because Bash and ExecuteCode have no allow-list or human-in-the-loop approval, the attacker can execute code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-109440","publishedAt":"2026-10-20T01:17:10.103Z","cveId":"CVE-2026-109440","cweIds":null,"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LangAlpha"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangAlpha indirect prompt injection through agent-retrieved web content","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-20T06:15:30.048Z","kevDateAdded":null,"advisoryAliases":["GHSA-fcmr-j7xj-36vp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-20T06:15:34.625Z","patchAvailable":null,"disclosureDate":"2026-10-20T01:17:10.103Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"]}}