CVE-2026-44691

Remote Code Execution via Untrusted Workspace Task Definitions

Published Jun 18, 2026 CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Description

In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitrary commands with the user's privileges. In combination with AI chat features and a workspace .theia/settings.json that disabled tool confirmation, this could be triggered automatically by sending a message in the AI chat.

Analysis

Technical impact

Eclipse Theia allows custom task definitions specified in workspace files such as .theia/tasks.json or .vscode/tasks.json to be executed without enforcing workspace trust. An attacker can create a malicious repository that, when cloned and opened in Theia, will run arbitrary shell commands with the privileges of the user who opens the workspace. This constitutes a high‑severity remote code execution vulnerability with full control over the system on which Theia is running.

Affected Systems

The flaw exists in all Eclipse Theia releases earlier than version 1.69.0. Any user who opens a workspace containing a malicious .theia or .vscode tasks file from an untrusted source is susceptible. The issue is triggered automatically when the user receives a message in the AI chat that calls a task defined in the workspace and when tool confirmation is disabled.

Risk and Exploitability

The CVSS score of 8.4 marks it as high risk. The EPSS score is not available, so the real‑world likelihood of exploitation cannot be quantified, but the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to supply a crafted repository and, for automatic triggering, a message sent in the AI chat. If the user opens the workspace or the chat message is accepted, the attacker can execute arbitrary commands immediately.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Eclipse Foundation

Eclipse Theia

unaffected

Version	Status	Constraints
`0`	affected	< 1.69.0

Configuration 1 [-]

cpe:2.3:a:eclipse:theia:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Eclipse

Theia

Version	Status	Scheme	Platform
`[0,1.69.0)`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Eclipse Theia to version 1.69.0 or later.
Configure the workspace trust setting to require explicit approval before running any custom tasks from untrusted workspaces.
Ensure that tool confirmation is enabled in the .theia/settings.json file to block silent task execution.
Limit or disable the AI chat feature that can trigger tasks automatically, or enforce a confirmation prompt before executing any task from a chat message.

Generated by OpenCVE AI on June 18, 2026 at 19:01 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-g9jw-92q7-g7fj	[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.408% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/116

History

Jun 18, 2026 8:15 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Eclipse Eclipse theia
Vendors & Products		Eclipse Eclipse theia

Jun 18, 2026 7:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Remote Code Execution via Untrusted Workspace Task Definitions

Jun 18, 2026 4:45 PM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitrary commands with the user's privileges. In combination with AI chat features and a workspace .theia/settings.json that disabled tool confirmation, this could be triggered automatically by sending a message in the AI chat.
Weaknesses		CWE-829
References		https://gitlab.eclipse.org/security/cve-assignment/-/work_items/116
Metrics		cvssV4_0 `{'score': 8.4, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`