Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands

Cybersecuritynews •Abinaya • October 7, 2026

Progress disclosed critical command injection flaw CVE-2026-91140 in DataDirect Autonomous REST Connector AI Model Generator agents, allowing malicious OpenAPI or Swagger documents to execute arbitrary OS commands. The security bulletin, published on October 6, 2026, covers Early Access agent definitions available through the public progress/datadirect-arc-ai-model-gen GitHub repository. Progress has released updated definitions and urges customers […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Command Injection Flaw in Progress DataDirect GenAI Agents Progress Software disclosed a critical command injection vulnerability, tracked as CVE-2026-91140, in its DataDirect Autonomous REST Connector GenAI Agents. This flaw allows attackers to execute arbitrary operating system commands via specially crafted OpenAPI or Swagger documents. The vulnerability arises from inadequate validation of filenames used in shell operations, with a CVSS score of 9.6. Affected components include ARCGenAI-Generator.agent.md (version 2.0), ARCGenAI-Generator.prompt.md (version 1.0), and ARCGenAI-EntityGen.agent.md (version 1.0). Progress has released version 2.1 of the agent definitions to address this issue and urges users to update immediately. No in-the-wild exploitation has been confirmed, but the potential for exploitation exists in developer workspaces or CI environments. Users are advised to inspect their environments for unexpected changes if they have used vulnerable definitions. 5 sources 71

Extracted Entities

Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (3)