{"data":{"id":"379c5eae-9d1a-49fb-a85e-6bebf2d5a4c7","title":"CVE-2026-82217: In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI \"Agent Mode\" file-change tools…","summary":"In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI \"Agent Mode\" file-change tools (writeFileContent, suggestFileContent, and the replacement and state helpers) accept a model-supplied file path without a workspace-containment check. A crafted relative, absolute, or ~-expanded path can write or delete files outside the workspace with the privileges of the Theia backend OS user, and writes apply without a confirmation dialog in Agent Mode. Overwriting a host-executed file such as a shell startup file or ~/.ssh/authorized_keys can escalate to code execution on the backend.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82217","publishedAt":"2026-08-31T14:17:26.610Z","cveId":"CVE-2026-82217","cweIds":["CWE-22"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Eclipse Theia AI Agent Mode"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Eclipse Theia AI file-change tools path traversal outside workspace","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00617,"epssCheckedAt":"2026-11-06T00:07:11.071Z","kevDateAdded":null,"advisoryAliases":["GHSA-2qmg-qr8r-hr5c"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:08:51.981Z","patchAvailable":null,"disclosureDate":"2026-08-31T14:17:26.610Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}