description: "CVE-2026-82217 is a High (8.8) vulnerability: In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI 'Agent Mode'…. This entry ships a detection-only PoC and a..." keywords: "CVE-2026-82217, CVE-2026-82217 detection, CVE-2026-82217 poc, In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode"…"
CVE-2026-82217 — In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode"…¶
Key facts
CVE-2026-82217 is a High (8.8) vulnerability: In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode"…. This entry ships a detection-only PoC and a Docker test lab.
| CVE | CVE-2026-82217 |
| Severity | High (8.8) |
| Detection / prevention | — |
| PoC | poc.py |
| Source | 2026/CVE-2026-82217/ |
Details¶
English | 한국어
Description¶
In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContent, and the replacement and state helpers) resolved a model-supplied file path without a workspace-containment check. A crafted relative path such as ../.bashrc, an absolute path, or a ~-expanded path could therefore write or delete files outside the workspace with the privileges of the Theia backend OS user. Because the path argument is influenced by model output, it can be steered through indirect prompt injection, and in Agent Mode writes are applied without a confirmation dialog. Writing to a host-executed file such as a shell startup file or ~/.ssh/authorized_keys can escalate to code execution on the backend.
Vulnerability Details¶
| Property | Value |
|---|---|
| CVE ID | CVE-2026-82217 |
| Type | PATH_TRAVERSAL |
| CVSS Score | 8.8 |
Proof of Concept¶
Download¶
# Download PoC script
curl -O https://raw.githubusercontent.com/fankh/vulnerability-poc/main/2026/CVE-2026-82217/poc.py
Usage¶
# Run PoC against target
python3 poc.py --target <TARGET_URL>
# With authentication
python3 poc.py --target <TARGET_URL> --username <USER> --password <PASS>
⚠️ Warning: This PoC is for authorized security testing only. It uses detection-only techniques and does not exploit or damage target systems.
Test Lab¶
This repository includes a Docker-based test environment with both vulnerable and patched applications.
Quick Start¶
# Clone and navigate to CVE directory
cd CVE-2026-82217
# Start both applications
docker-compose up -d
# Run tests
./run-tests.sh # Linux/Mac
./run-tests.ps1 # Windows PowerShell
Application Endpoints¶
| Application | URL | Status |
|---|---|---|
| Vulnerable App | http://localhost:8080 | Shows vulnerability |
| Patched App | http://localhost:8081 | Demonstrates fix |
Directory Structure¶
├── README.md # English documentation
├── README_KO.md # Korean documentation
├── poc.py # PoC detection script
├── docker-compose.yml # Container orchestration
├── run-tests.sh # Linux/Mac test runner
├── run-tests.ps1 # Windows test runner
├── vulnerable-app/ # Vulnerable version
│ ├── app.py
│ ├── Dockerfile
│ └── requirements.txt
└── patched-app/ # Fixed version
├── app.py
├── Dockerfile
└── requirements.txt
References¶
- https://github.com/eclipse-theia/theia/commit/28da106c254
- https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/624
Generated by PoC Generator on 2026-09-02T23:29:38.206127782
Frequently asked questions¶
What is CVE-2026-82217?¶
CVE-2026-82217 is a High (8.8) vulnerability: In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode"…. This entry ships a detection-only PoC and a Docker test lab.
How do I detect CVE-2026-82217?¶
Run the detection-only PoC included with this entry against your Docker test lab to confirm whether a target is affected; pair it with your own IDS logging.
How do I block or mitigate CVE-2026-82217?¶
Upgrade to a fixed version per the vendor advisory; the NVD record lists the affected versions. Use the included PoC to verify your remediation.
For authorized security testing and research only. See the full source and NVD record.