Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: ginlix-ai Clear all filters
TI-2026-76648 CVE-2026-109441

Improper isolation in LangAlpha exposes other tenants' sandboxes

Priority MEDIUM 64

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00442 Published 2026-10-20 No fix listed CWE-653
TI-2026-76647 CVE-2026-109440

Prompt injection in LangAlpha lets attackers run shell commands

Priority HIGH 73

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00601 Published 2026-10-20 No fix listed CWE-1427