CVE-2026-19884

In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first. This affects applications built on Theia that include the git integration, such as the Theia IDE. Both Theia's own `@theia/git` extension and the builtin VS Code `git` extension run git commands such as `git status` as soon as a repository is detected. Since git honors repository-local configuration, a folder containing an attacker-controlled `.git/config` with `core.fsmonitor` (or a comparable hook-like setting) causes the configured command to be executed. The configuration can be delivered by burying a bare repository inside a regular repository (OVE-20210718-0001), so cloning an attacker-supplied repository and opening it in a Theia-based application is sufficient to execute arbitrary commands with the privileges of the user, without any confirmation prompt. As of 1.70.0, plugins that declare `capabilities.untrustedWorkspaces.supported: false`, which includes the builtin git extension, are no longer loaded or activated in an untrusted workspace, and the deprecated `@theia/git` extension has been removed, so no git command is executed against an untrusted folder.

• CWE-15
• CWE-829

• https://github.com/eclipse-theia/theia/pull/16809
• https://github.com/eclipse-theia/theia/pull/17098
• https://github.com/eclipse-theia/theia/pull/17148
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/231
• https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/175

Published

Aug 14, 2026

Last Modified

Aug 18, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19874A heap-based buffer overflow vulnerability exists in Konami'…9.1
• CVE-2026-19875IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote a…7.5
• CVE-2026-19879A flaw was found in Undertow, an HTTP server, within its HTT…5.3
• CVE-2026-1988The Flexi Product Slider and Grid for WooCommerce plugin for…7.5
• CVE-2026-19880Path-traversal vulnerability in QOS.CH Sarl Logback-classic …6.3
• CVE-2026-19883The WPeMatico RSS Feed Fetcher plugin for WordPress is vulne…8.8
• CVE-2026-19885OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Writ…7.8
• CVE-2026-19886OriginLab Origin Viewer OGM File Parsing Memory Corruption R…7.8
• CVE-2026-19887The Welcart e-Commerce plugin for WordPress is vulnerable to…8.8
• CVE-2026-19889GitLab has remediated a vulnerability in the GitLab AI Gatew…8.2
• CVE-2026-1989Authorization bypass through User-Controlled key vulnerabili…7.5
• CVE-2026-19891A vulnerability was determined in TRENDnet TEW-WLC100 2.05b0…3.7