CVE-2026-61891

In Eclipse Theia versions up to and including 1.73.1, the "@theia/filesystem" backend exposes HTTP file-download endpoints "GET /file", "GET /files/", "PUT /files/" that convert a client-supplied URI directly to a filesystem path and stream the file, without confining it to the workspace or any...