Skip to content
OpenAdvisories
High · 8.6 CVE-2026-106020 EUVD-2026-118264GHSA-g936-836g-r2pg

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows …

Published Nov 6, 2026 · Updated Nov 10, 2026 · Assigned by jci

Description

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking.

This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0.

Affected products

VendorProductAffectedFixed
Johnson Controls EasyIO Neo IO Manager and Tools Installer 1.1.0.0 —

References