Progress Software Autonomous REST Connector GenAI Agents vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Progress Software Autonomous REST Connector GenAI Agents: 1 record(s), with affected versions and fixes.

CVE-2026-91140 Critical · 9.6 CWE-78 Oct 6, 2026

OS command injection in Progress Software Autonomous REST Connector GenAI Agents

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's machine when a user invokes the generator.