Arbitrary External URL Requests in Eclipse Theia AI Chat

CVE-2026-22551

What is CVE-2026-22551?

In affected versions of Eclipse Theia, the AI chat feature inadvertently allows the rendering of Markdown image tags from AI-generated responses. This functionality triggers HTTP requests to arbitrary external URLs, which can be exploited by attackers. By combining this with prompt injection in a malicious workspace, an attacker can manipulate the AI agent to generate image URLs that carry sensitive data from the workspace or conversation context. These URLs could lead to the exfiltration of this sensitive information to servers controlled by the attacker. The release of version 1.71.0 introduces workspace trust enforcement that mitigates this risk by disabling AI capabilities in untrusted environments, enhancing security for users.

References