Skip to content
OpenAdvisories

Package · npm

@theia/ai-code-completion

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.7
    CVE-2026-22551

    [Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat

    In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs without restriction. Combined with prompt injection in a malicious workspace, an attacker could induce t…

    Eclipse Foundation Eclipse Theia eclipse @theia/ai-core Ubuntu npm
  • High 8.4
    CVE-2026-46580

    [Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat

    In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent's system prompts. An attacker could craft a malicious repository containing prom…

    Eclipse Foundation Eclipse Theia eclipse @theia/ai-editor Ubuntu npm
  • High 8.4
    CVE-2026-44688

    [Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat

    In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context without distinguishing them from system instructions. An attacker could craft a malicious repository with adversarial direc…

    Eclipse Foundation Eclipse Theia @theia/ai-chat @theia/ai-code-completion npm