{"vulnerability": "cve-2026-19884", "sightings": [{"uuid": "80e028dd-ab33-45da-aba6-1670e8984363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt2jtuj4xd2p", "content": "Opening a booby-trapped code repository can run an attacker's commands in editors built on Eclipse Theia (the framework under Arduino IDE 2.x and other tools).\n\nA crafted git config runs on folder open, no trust prompt. CVE-2026-19884, CVSS 8.4.\n\nFix: update to Theia 1.70.0.", "creation_timestamp": "2026-08-14T16:02:49.077193Z"}, {"uuid": "68205e77-4273-4d44-a633-55420863c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2l5gf2j3lvsj3", "content": "CVE-2026-19884 - Eclipse Theia Git Extension Arbitrary Command Execution Vulnerability\nCVE ID : CVE-2026-19884\n \n Published : Aug. 14, 2026, 3:32 p.m. | 40\u00a0minutes ago\n \n Description : In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control...", "creation_timestamp": "2026-08-14T16:27:12.658930Z"}]}