Read the docs

ginlix-ai

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ginlix-ai records in CISA KEV

No ginlix-ai vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-76647 CVE-2026-109440

Prompt injection in LangAlpha lets attackers run shell commands

Priority HIGH 73

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00601 Published 2026-10-20 No fix listed CWE-1427
TI-2026-76648 CVE-2026-109441

Improper isolation in LangAlpha exposes other tenants' sandboxes

Priority MEDIUM 64

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00442 Published 2026-10-20 No fix listed CWE-653
Open these records in search →