Tools AI Risk Radar ai-incident-0267
Incident record
An ATXP extension can turn tool input into commands
- Severity
- High
- Status
- Proof-of-concept
- Type
- Infra Vuln
- Target
- Third-party ATXP Gemini CLI extension through 1.0.0
- Actor
- Researcher disclosure
- CVE
- CVE-2026-117560
What happened
Untrusted content can influence tool arguments that reach a host shell in the ATXP extension. Affected users need to consider which content an agent reads before invoking its tools.
The original researcher issue is dated 23 October; the CVE was published on 27 October. The CNA lists versions through 1.0.0 and a High severity. The issue remained open at review. This concerns the third-party ATXP extension and its command handling; the reviewed source does not establish a patched release.
Sources
- Canonical CVE recordraw.githubusercontent.com/CVEProject/cvelistV5/main/cves/202…
- Original researcher issuegithub.com/atxp-dev/atxp/issues/15
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026