{"vulnerability": "cve-2026-91140", "sightings": [{"uuid": "c62e0c40-25fc-4ce1-9560-102ce26ac724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7mg2r35q2t", "content": "Progress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.\n\n#Progress #DataDirect #CVE202691140 #CommandInjection #AIAgents #OpenAPI #DevSecOps #Vulnerability", "creation_timestamp": "2026-10-06T14:12:51.920363Z"}, {"uuid": "cd9e8b4e-5153-467e-802e-5d5bed28205d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7sstcncb2z", "content": "\ud83d\udea8 CVE-2026-91140 \u2014 CVSS 9.6 CRITICAL\n\nAn OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress So...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91140\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T16:07:22.668674Z"}, {"uuid": "575a87d1-9caa-4643-8246-205f0cc6a5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1005", "content": "", "creation_timestamp": "2026-10-06T12:42:39.000000Z"}, {"uuid": "522d7c6e-6c7c-4966-9e99-e98332169833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2hupts2n", "content": "CVE-2026-91140 - autonomous rest connector genai agents\nThe Autonomous REST Connector GenAI Agents version 2.0 can be tricked by a specially crafted API description file to run any command on the developer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#progress #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:07.313357Z"}, {"uuid": "57e91388-6c06-4141-9ad6-6595528a17a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxbs5wwe5f2p", "content": "Kritieke kwetsbaarheid ontdekt in DataDirect Autonomous REST Connector AI Model \n\nEen ernstige kwetsbaarheid, bekend als CVE-2026-91140, is aangetroffen in agents van DataDirect Autonomous REST Connector AI Model Generator. Deze kwetsbaarheid maakt onbevoegde uitvoering van willekeurige best...", "creation_timestamp": "2026-10-07T11:01:01.575752Z"}]}