CVE-2026-44691 affects Eclipse Theia versions before 1.69.0 by permitting execution of custom task definitions in workspace files such as .theia/tasks.json or .vscode/tasks.json without enforcing workspace trust. This lack of trust verification allows an attacker to deliver a malicious repository that, once cloned and opened, can run arbitrary commands with the privileges of the user running Theia. Additionally, if AI chat features are used alongside a workspace .theia/settings.json configuration that disables tool confirmation, the malicious commands can be triggered automatically. This vulnerability is categorized under CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). No official remediation or patch has been documented in the provided data.

An attacker can execute arbitrary commands on the victim's system with the same privileges as the user running Eclipse Theia by delivering a malicious repository. This can lead to compromise of the user's environment, data loss, or further system exploitation. The vulnerability is rated high severity with a CVSS 4.0 score of 8.4, indicating significant risk if exploited. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening untrusted repositories in Eclipse Theia versions prior to 1.69.0. Additionally, review and adjust workspace settings to ensure tool confirmation is enabled, especially when using AI chat features, to prevent automatic execution of tasks from untrusted sources.