modo

Modo The open-source AI IDE that plans before it codes. MIT License · Quick Start · What Modo Adds · Contributing I wanted a small feature in an AI coding tool. Couldn't find a way to suggest it. So I asked myself: how hard is it to actually build something like Kiro, Cursor, or Windsurf? Turns o...

ai-ide-config-guard

valtik-ai-ide-config-guard Scan a repository for AI-IDE configuration files that can trigger RCE, credential theft, or persistent compromise of developer machines when the repo is opened in Claude Code, Cursor, Windsurf, Continue, or any VS Code fork. Built in response to the April 2026 AI-IDE...

Directory Traversal

Overview @theia/ai-ide is an AI IDE Agents Extension Affected versions of this package are vulnerable to Directory Traversal through the AI Agent Mode file-change tools in the workspace path resolution code. An attacker can write or delete files outside the workspace by supplying a crafted relati...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: GHSA-M973-PR9R-HP2W...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: OSV:GHSA-M973-PR9R-HP2W...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHATUI-17391844...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: OSV:GHSA-3JWW-HXQJ-WFQ2...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: SNYK:JS-THEIAAICHATUI-17391851...

Insertion of Sensitive Information Into Sent Data

Overview @theia/ai-ide is an AI IDE Agents Extension Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the rendering of Markdown image tags in AI chat responses. An attacker can cause sensitive information from the workspace or conversation...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: OSV:GHSA-QWJM-9C66-W4Q4...

Unsafe Dependency Resolution

Overview @theia/ai-ide is an AI IDE Agents Extension Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the processing of workspace file and directory names in the AI chat. An attacker can cause the agent to execute attacker-controlled instructions by introducing...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: SNYK:JS-THEIAAICHATUI-17391865...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: GHSA-3JWW-HXQJ-WFQ2...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: GHSA-QWJM-9C66-W4Q4...

@codeanywhere/theia-plugin-ext (>=1.11.0, <=1.11.4), @eclipse-che/theia-factory-extension (>=0.0.1-1536151614, <=0.0.1-1536565198) +30 more potentially affected by CVE-2026-44691 via @theia/task (>=0.3.14, <=1.69.0-next.81)

@theia/task NPM version =0.3.14, =1.11.0, =0.0.1-1536151614, =0.0.1-1583345065, =1.58.6, =1.61.0, =0.3.16, =1.17.2, =0.12.0-next.162a48a7, =0.12.0-next.162a48a7, =0.7.0-next.2011dfb2, =0.12.0-next.162a48a7, =1.29.0-next.50, =0.8.0-next.01993d09, =0.3.18, =1.69.0-next.81 and more Source cves:...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-22551 Source advisory: MEND:CVE-2026-22551...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: MEND:CVE-2026-46580...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: MEND:CVE-2026-44688...

Cursor AI IDE vulnerability allows code execution via hidden Git hooks

Novee researchers find high-severity CVE-2026-26268 flaw in Cursor AI, allowing hackers to run malicious code when developers clone repositories...