{"data":{"id":"e7270977-dc8f-4d44-ab7d-192ebbc822e9","title":"CVE-2026-123498: Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write access to…","summary":"Vikunja veans before 2.7.1 contains a prompt injection vulnerability. Project members with write access can set project titles or task content that the prime hook loads on SessionStart and PreCompact, where it is rendered verbatim inside the coding agent's authoritative instruction block. This can cause the agent to modify the developer's checkout or run commands.","solution":"Fixed in 2.7.1","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-123498","publishedAt":"2026-11-08T02:16:37.340Z","cveId":"CVE-2026-123498","cweIds":null,"cvssScore":"3.7","cvssSeverity":"low","severity":"low","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Vikunja veans coding agent"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Vikunja veans prompt injection through project titles and task content","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-11-08T06:09:27.512Z","kevDateAdded":null,"advisoryAliases":["GHSA-3v4w-4754-gmfj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:30.914Z","patchAvailable":null,"disclosureDate":"2026-11-08T02:16:37.340Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}