@hacks.grA file that looks like ordinary instructions could make Progress’s model-generation tool run commands on the computer using it—if specially modified.
Progress has fixe…
https://en.hacks.gr/kakovoylo-archeio-mporoyse-na-kanei-ergaleio-tis-progress-na-ektelei-entoles/
@securityonline.bsky.socialProgress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.
#Progress #DataDirect #CVE202691140 #CommandInjection #AIAgents #OpenAPI #DevSecOps #Vulnerability