CVE-2026-109440: LangAlpha 0 through 2026.09.07

Affected technology

LangAlpha · 0 through 2026.09.07
ginlix-ai

Description’s affected range: through 2026.09.07

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction

What an attacker can do

Remote attackers can execute shell commands or Python by planting instructions in web content retrieved by the agent. Vendor/CNA’s CVSS 4.0 assessment (base score 8.6/10) rates confidentiality and integrity impact as high; availability impact as none.