What’s Vulnerable › Vulnerabilities

CVE-2026-109440: LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-20 · updated 2026-10-22
• Weakness: CWE-1427

Description

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.

Affected products

• ginlix-ai LangAlpha: through 2026.09.07

References

• https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/agent/agent.py#L524
• https://www.lasso.security/vulnerability-database/cve-2026-109440
• https://www.vulncheck.com/advisories/langalpha-through-2026.09.07-indirect-prompt-injection-rce-via-bash-and-executecode

Get alerted when CVE-2026-109440 or the next vulnerability affects your stack