CVE-2025-54135

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 26, 2026

Last Seen

October 7, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Command Injection Flaw in Progress DataDirect GenAI Agents70.5

Progress Software disclosed a critical command injection vulnerability, tracked as CVE-2026-91140, in its DataDirect Autonomous REST Connector GenAI Agents. This flaw allows attackers to execute arbitrary operating system commands via specially crafted OpenAPI or Swagger documents. The vulnerability...

Emerging Threats from AI Coding Assistants Exploited by Malicious Artifacts67.5

AI coding assistants like Claude Code and GitHub Copilot are vulnerable to prompt injection attacks that exploit unvetted external artifacts. These attacks can turn coding assistants into attackers' shells, executing unauthorized commands with developer privileges. Recent vulnerabilities, including...