Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse Theia

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.7
    CVE-2026-14574

    In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia/core` re…

    Eclipse Foundation Eclipse Theia
  • Medium 6.7
    CVE-2026-22551

    [Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat

    In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs without restriction. Combined with prompt injection in a malicious workspace, an attacker could induce t…

    Eclipse Foundation Eclipse Theia eclipse @theia/ai-claude-code Ubuntu npm