[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions (CVE-2026-44691)

[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions (CVE-2026-44691) | HOL Guard CVE

Why this deserves its current priority

CVSS is 8.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps @theia/debug (npm), @theia/debug (npm), @theia/task (npm), @theia/task (npm) and additional mapped packages. Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
@theia/debugnpm	<1.69.0	1.69.0
@theia/debugnpm	>=0 <1.69.0	1.69.0
@theia/tasknpm	<1.69.0	1.69.0
@theia/tasknpm	>=0 <1.69.0	1.69.0
@theia/workspacenpm	<1.69.0	1.69.0
@theia/workspacenpm	>=0 <1.69.0	1.69.0

Recommended response

Check inventory. Check lockfiles and deployed manifests for @theia/debug, @theia/debug, @theia/task.
Review the reported fix. Update @theia/debug to 1.69.0; @theia/debug to 1.69.0; @theia/task to 1.69.0; @theia/task to 1.69.0; @theia/workspace to 1.69.0; @theia/workspace to 1.69.0 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Jun 18, 2026
Evidence: source:osv:source_dates:source-dates:record
Source modified
Sep 10, 2026
Evidence: source:osv:source_dates:source-dates:record
First seen by HOL
Jun 19, 2026

Sources and claim methodology

Upstream source description

In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitrary commands with the user's privileges. In combination with AI chat features and a workspace .theia/settings.json that disabled tool confirmation, this could be triggered automatically by sending a message in the AI chat.

Quoted source text, attributed separately from HOL analysis.