A critical path traversal vulnerability in Eclipse Theia AI Agent Mode allows unauthenticated attackers to execute arbitrary code on the backend host system.

This is a path traversal vulnerability (CWE-22) where AI-driven file tools fail to validate paths against the workspace boundary. An unauthenticated attacker can leverage indirect prompt injection to manipulate model output, enabling unauthorized file modification or deletion with the privileges of the backend OS user.

The ability to write to sensitive host files, such as shell startup scripts or SSH authorized keys, results in full remote code execution on the application backend. Given the high CVSS score of 8.8, this flaw poses a severe risk to the confidentiality, integrity, and availability of the entire development environment. Successful exploitation could lead to total system compromise, unauthorized data exfiltration, and the persistence of malicious actors within the infrastructure.

Immediate Action: Update Eclipse Theia to version 1.75.0 or later immediately to incorporate the required workspace-containment validation logic.

Proactive Monitoring: Review system logs for unauthorized file modification events, specifically targeting changes to critical configuration files or hidden directories like .ssh or shell profiles.

Compensating Controls: Implement strict network segmentation for the Theia backend and enforce least-privilege principles for the OS user running the service to limit the impact of a potential breakout.

Public Exploit Available: No confirmed public exploit (Metasploit/ExploitDB) is available.

The risk associated with this vulnerability is elevated due to the potential for remote code execution and the existence of proof-of-concept assessment data. Organizations currently running affected versions of Eclipse Theia must prioritize updating to version 1.75.0 to remediate the path traversal flaw. Failure to patch allows for potential full system takeover, making immediate intervention necessary to maintain a secure development environment.