CVE-2026-123498: Vikunja veans prompt injection through project titles and task content

Summary

Vikunja veans before 2.7.1 contains a prompt injection vulnerability. Project members with write access can set project titles or task content that the prime hook loads on SessionStart and PreCompact, where it is rendered verbatim inside the coding agent's authoritative instruction block. This can cause the agent to modify the developer's checkout or run commands.

Mitigation

Fixed in 2.7.1

Topics

• Prompt injection and jailbreaks

Related items

• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
• MediumCVE-2026-123851: JetBrains Junie GitHub Action prompt injection bypass via HTML encodingSimilar attack · NVD/CVE Database
• InfoDecision Models as Retrieval Gates Against Injection and PollutionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMultimodal-SEA: Benchmarking AI Agent Security under Multimodal Social Engineering AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumResearchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User InteractionSimilar attack · The Hacker News