By vendor

Eclipse vulnerabilities

Known CVEs affecting Eclipse products, prioritized by severity, with SEC.co remediation and detection guidance.

5 published vulnerabilities

• CVE-2026-44688HIGH 8.8

  Eclipse Theia's AI chat assistant has a critical flaw where it treats file and directory names as if they were legitimate instructions rather than user data. An attacker can create a malicious code repository with specially crafted folder or file names that trick the AI into following hidden commands embedded in those names. This could lead to sensitive data being stolen or unauthorized commands being executed on a developer's machine, especially when developers open untrusted repositories in Theia.

• CVE-2026-44691HIGH 8.8

  Eclipse Theia versions before 1.69.0 automatically execute custom task definitions from workspace configuration files without requiring the user to grant permission. An attacker can create a malicious Git repository that, when cloned and opened in Theia, runs arbitrary commands under the user's account. If the workspace also disables AI chat tool confirmations, the attacker can trigger command execution remotely by sending a message through Theia's AI chat feature.

• CVE-2026-46580HIGH 8.8

  Eclipse Theia contains a vulnerability that allows attackers to hijack AI chat functionality by embedding malicious prompt template files in repositories. When a developer opens an untrusted repository in Theia, the application automatically loads prompt files from a `.prompts/*.prompttemplate` directory, which can overwrite the AI agent's instructions with attacker-controlled commands. This indirect prompt injection can be chained with other Theia features to steal data or execute arbitrary commands on the developer's machine.

• CVE-2026-11576HIGH 7.5

  A recent security patch for eclipse-threadx NetX Duo's HTTP server introduced a new vulnerability. When handling file upload requests, the code uses a single cleanup routine that always tries to close a file—even if the file was never opened in the first place. If an error occurs before the file is successfully opened, the cleanup code attempts to close an uninitialized file handle, causing the application to crash, leak memory, or potentially corrupt data. This is a regression: the patch meant to fix one vulnerability inadvertently created another.

• CVE-2026-22551MEDIUM 6.5

  Eclipse Theia, a browser-based IDE platform, contains a vulnerability in its AI chat feature that allows attackers to exfiltrate sensitive workspace data. When a user opens a malicious or compromised workspace and interacts with the AI chat, an attacker can inject prompts that trick the AI into generating Markdown image tags pointing to attacker-controlled servers. Because Theia automatically renders these images by fetching them from arbitrary URLs, the attacker can encode sensitive information—such as file contents, API keys, or conversation history—in the image URL itself, effectively stealing it. This requires user interaction (opening a workspace and using AI chat) but no special privileges. The risk is elevated in environments where developers regularly open workspaces from untrusted or semi-trusted sources.