CVE-2026-109440
LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.
| CWE | CWE-1427 |
| Vendor | ginlix-ai |
| Product | langalpha |
| Published | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for ginlix-ai langalpha
Be the first to know when new high vulnerabilities affecting ginlix-ai langalpha are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
ginlix-ai / LangAlpha
0 ≤ 2026.09.07
References
lasso.security: https://www.lasso.security/vulnerability-database/cve-2026-109440 github.com: https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/agent/agent.py#L524 vulncheck.com: https://www.vulncheck.com/advisories/langalpha-through-2026.09.07-indirect-prompt-injection-rce-via-bash-and-executecode
Credits
Noy Pearl Michael Sromin Ophir Dror