Vulnerability · Published Jun 18, 2026 · Assigned by eclipse
CVE-2026-22551
Medium 6.7
In plain English
A medium-severity security flaw in Eclipse Theia from Eclipse Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs without restriction. Combined with prompt injection in a malicious workspace, an attacker could induce the AI agent to construct image URLs encoding sensitive information from the workspace or conversation context, exfiltrating it to attacker-controlled servers. The workspace trust enforcement introduced in v1.71.0 mitigates the documented attack chain by disabling AI features in untrusted workspaces.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | @theia/ai-chat | 1.71.0 | GHSA-qwjm-9c66-w4q4 |
| npm | @theia/ai-chat-ui | 1.71.0 | GHSA-qwjm-9c66-w4q4 |
| npm | @theia/ai-claude-code | 1.71.0 | GHSA-qwjm-9c66-w4q4 |
| npm | @theia/ai-code-completion | 1.71.0 | GHSA-qwjm-9c66-w4q4 |
| npm | @theia/ai-core | 1.71.0 | GHSA-qwjm-9c66-w4q4 |
| npm | @theia/ai-editor | 1.71.0 | GHSA-qwjm-9c66-w4q4 |
| npm | @theia/ai-ide | 1.71.0 | GHSA-qwjm-9c66-w4q4 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Eclipse Foundation | Eclipse Theia | 0 – before 1.71.0 |
Weakness: CWE-201, CWE-829 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N