CVE-2026-109440
LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode
- State
- Published
- Severity
- 8.7 High
- Published
- Oct 20, 2026
- Updated
- Oct 22, 2026
- Reserved
- Oct 12, 2026
Description
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-1427 Improper Neutralization of Input Used for LLM Prompting
Affected Products
| Product | Versions |
|---|---|
LangAlphaginlix-ai |
|
References
- Lasso.security Advisorytechnical-descriptionexploit
- https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/agent/agent.py#L524technical-description
- VulnCheck Advisory: LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCodethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.