Vulnerability · Published Oct 20, 2026 · Assigned by VulnCheck

CVE-2026-109440LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode

High 8.8

In plain English

A high-severity security flaw in LangAlpha from ginlix-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.6%top 51.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers can run code in the workspace sandbox and exfiltrate vault secrets from _internal/.vault_secrets.json.

Affected products (as reported)

Vendor	Product	Versions
ginlix-ai	LangAlpha	0 – through 2026.09.07

Weakness: CWE-1427 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Lasso.security Advisory technical-description, exploit
https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/agent/agent.py#L524 technical-description
VulnCheck Advisory: LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode third-party-advisory