Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 6:35 p.m.22 views

[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions

In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files e.g. .theia/tasks.json, .vscode/tasks.json could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitra...

8.8CVSS6.1AI score0.00408EPSS
SaveExploits0References6Affected Software3
Rows per page
Query Builder