CVE-2026-91140

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...

CVE-2026-91140 OS command injection in Progress Software Autonomous REST Connector GenAI Agents

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...

EUVD-2026-93397

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...

CVE-2026-91140 OS command injection in Progress Software Autonomous REST Connector GenAI Agents

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...

CVE-2026-91140 OS command injection in Progress Software Autonomous REST Connector GenAI Agents

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...

CVE-2026-91140

The Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 contains an OS command injection vulnerability (CWE-78) within its shell-based temporary-file cleanup instructions. An attacker can execute arbitrary commands on a developer's machine by providing a crafte...

PT-2026-106736

Name of the Vulnerable Software and Affected Versions Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator versions prior to 2.1 Description An OS command injection flaw exists in the shell-based temporary-file cleanup instructions. An attacker can execute arbitrary command...

CVE-2026-91140: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...

genai-agents (>=0.1.0, <=0.1.3), get-test-cases-from-tfs (>=0.2.0, <=0.3.0) +1 more potentially affected by CVE-2026-55443 via langchain (0.1.8)

langchain PYPI version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - genai-agents =0.1.0, =0.2.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

genai-agents (>=0.1.0, <=0.1.3), get-test-cases-from-tfs (>=0.2.0, <=0.3.0) +1 more potentially affected by CVE-2026-55443 via langchain (0.1.8)

langchain PYPI version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - genai-agents =0.1.0, =0.2.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

genai-agents (>=0.1.0, <=0.1.3), openagi (>=0.1.0b0, <=0.1.0b4) potentially affected by CVE-2024-58340 via langchain-exa (0.0.1)

langchain-exa PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-exa and may be impacted: - genai-agents =0.1.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2024-58340 Source advisory: OSV:PYSEC-2026-75...

Securing Agentic AI: a Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

As generative AI GenAI agents become more common in enterprise settings, they introduce security challenges that differ significantly from those posed by traditional systems. These agents are not just LLMs; they reason, remember, and act, often with minimal human oversight. This paper introduces ...

genai-agents (>=0.1.0, <=0.1.3), openagi (>=0.1.0b0, <=0.1.0b4) potentially affected by CVE-2024-0243 via langchain-exa (0.0.1)

langchain-exa PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-exa and may be impacted: - genai-agents =0.1.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2024-0243 Source advisory: OSV:PYSEC-2024-235...