{"uuid": "80e028dd-ab33-45da-aba6-1670e8984363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt2jtuj4xd2p", "content": "Opening a booby-trapped code repository can run an attacker's commands in editors built on Eclipse Theia (the framework under Arduino IDE 2.x and other tools).\n\nA crafted git config runs on folder open, no trust prompt. CVE-2026-19884, CVSS 8.4.\n\nFix: update to Theia 1.70.0.", "creation_timestamp": "2026-08-14T16:02:49.077193Z"}