Eclipse Theia vulnerabilities

• eclipse theia, the eclipse foundation eclipse theia +1 more In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes... CVE-2026-61891 7.5 HighAugust 5, 2026
• eclipse theia, the eclipse foundation eclipse theia +1 more In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST... CVE-2026-60009 8.8 HighAugust 5, 2026
• eclipse theia, the eclipse foundation eclipse theia +1 more In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend... CVE-2026-12609 7.5 HighAugust 5, 2026
• eclipse theia, the eclipse foundation eclipse theia +1 more In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge`... CVE-2026-14574 5.7 MediumAugust 5, 2026
• eclipse theia, the eclipse foundation eclipse theia +1 more [Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions CVE-2026-44691 Fix available 8.4 HighJune 18, 2026
• eclipse theia, the eclipse foundation eclipse theia +1 more [Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat CVE-2026-22551 Fix available 6.7 MediumJune 18, 2026
• eclipse theia, the eclipse foundation eclipse theia +1 more [Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat CVE-2026-46580 Fix available 8.4 HighJune 18, 2026
• eclipse theia, the eclipse foundation eclipse theia +1 more [Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat CVE-2026-44688 Fix available 8.4 HighJune 18, 2026
• eclipse theia website, eclipse foundation theia - website +1 more In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview... CVE-2026-1699 Public exploit 10.0 CriticalJanuary 30, 2026
• eclipse theia, the eclipse foundation @theia/plugin-ext +1 more Improper Verification of Communication Channel in @theia/plugin-ext CVE-2021-41038 Fix available 6.1 MediumNovember 10, 2021
• eclipse theia, the eclipse foundation eclipse theia +1 more In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote... CVE-2021-34436 9.8 CriticalSeptember 2, 2021
• eclipse theia, the eclipse foundation eclipse theia +1 more Remote code execution in Eclipse Theia CVE-2021-34435 Fix available 8.8 HighSeptember 1, 2021
• eclipse theia, the eclipse foundation eclipse theia +1 more Command Injection in @theia/messages CVE-2021-28162 Fix available 6.1 MediumMarch 12, 2021
• eclipse theia, the eclipse foundation eclipse theia +1 more Improper Neutralization of Input in Theia console CVE-2021-28161 Fix available 6.1 MediumMarch 12, 2021
• eclipse theia, the eclipse foundation eclipse theia +1 more Cross-site Scripting (XSS) in Eclipse Theia CVE-2020-27224 Fix available 9.6 CriticalFebruary 24, 2021
• eclipse theia, the eclipse foundation eclipse theia +1 more Insufficient Verification of Data Authenticity in Eclipse Theia CVE-2019-17636 Fix available 8.1 HighMarch 10, 2020