VYPR

LangAlpha

by LangAlpha

CVEs (1)

  • CVE-2026-109440HigOct 20, 2026
    risk 0.53cvss 8.1epss —

    LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop…