CVE-2026-5002: PromtEngineer localGPT injection in LLM Prompt Handler via remote attack

Summary

CVE-2026-5002 affects PromtEngineer localGPT up to commit 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The flaw sits in the function _route_using_overviews in backend/server.py, within the LLM Prompt Handler component, and manipulation there leads to injection. The attack can be performed remotely, and public exploit code may be used.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• LowCVE-2026-123498: Vikunja veans prompt injection through project titles and task contentSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
• MediumCVE-2026-123851: JetBrains Junie GitHub Action prompt injection bypass via HTML encodingSimilar attack · NVD/CVE Database
• InfoDecision Models as Retrieval Gates Against Injection and PollutionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMultimodal-SEA: Benchmarking AI Agent Security under Multimodal Social Engineering AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)