Critical nvd · CVE-2026-91140

CVE-2026-91140: An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autono

Published Oct 6, 2026 CVSS 9.6

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's machine when a user invokes the generator.

Remote Code Execution

Affected AI Products

genai

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.