CVE-2026-109440: LangAlpha indirect web-content prompt injection into Bash and ExecuteCode

Evidence record

CVE-2026-109440: LangAlpha indirect web-content prompt injection into Bash and ExecuteCode

Read the original source ↗

Claim-level citations (2)

• supportsLangAlpha retrieved pages could be promoted into unrestricted shell commands: The LangAlpha advisory identifies retrieved web content as the injection entry point and unrestricted Bash and ExecuteCode tools as execution sinks; the advisory does not provide a verified number of exploited installations.

  CVE-2026-109440, Description, Bash and ExecuteCode tools

• supportsLangAlpha retrieved pages could be promoted into unrestricted shell commands: An unreviewed GitHub CVE record alleges that LangAlpha through build 2026.09.07 can treat malicious instructions in retrieved web content as authority to invoke Bash or ExecuteCode, with potential workspace secret access.

  Description, affected dated build, source-code reference and shell/Python tool precondition