CVE-2026-109440
Last modified
CVE-2026-109440 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json..
Description
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| ginlix-ai | LangAlpha | <= 2026.09.07 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-109440?
How severe is CVE-2026-109440?
How do I fix CVE-2026-109440?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-109433Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 cont…6.5
- CVE-2026-109434Fenrir Sleipnir Browser for Android before 3.9.0 contains a …4.3
- CVE-2026-109437Cognition before 0.13.0 contains an unauthenticated remote c…9.8
- CVE-2026-1094383proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, co…5.3
- CVE-2026-109439Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware …9.8
- CVE-2026-10944Insufficient policy enforcement in Autofill in Google Chrome…6.5
- CVE-2026-109441LangAlpha through 2026.09.07 contains an improper isolation …5.8
- CVE-2026-109442piflow 2.0.0 through 2.0.1 contains a remote code execution …9.8
- CVE-2026-109443JoySafeter through 1.0.0 contains a remote code execution vu…8.8
- CVE-2026-109444OpenSRE through 0.1.2026.10.19 contains an approval gate byp…8.8
- CVE-2026-109447The User Profile Builder – Beautiful User Registration Forms…8.1
- CVE-2026-109448Integer wraparound in psqlODBC SQLBindParameter allows an ap…5.9
Are you affected by CVE-2026-109440?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST