CVE-2026-82217: In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent
Summary
Eclipse Theia versions 1.73.0 to 1.75.0 have a vulnerability in AI 'Agent Mode' where file-writing tools don't check if file paths stay within the workspace (the allowed project folder). An attacker can use prompt injection (tricking the AI by hiding instructions in its input) to make the AI write files anywhere on the system, potentially modifying shell startup files or SSH keys to run malicious code with the privileges of the server running Theia.
Solution / Mitigation
Update to Eclipse Theia version 1.75.0 or later.
Vulnerability Details
8.8(high)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
network
low
none
required
August 31, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82217
First tracked: August 31, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 92%