Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands

What happened?

Progress disclosed critical command injection flaw CVE-2026-91140 in DataDirect Autonomous REST Connector AI Model Generator agents, allowing malicious OpenAPI or Swagger documents to execute arbitrary OS commands. The security bulletin, published on October 6, 2026, covers Early Access agent definitions available through the public progress/datadirect-arc-ai-model-gen GitHub repository. Progress has released updated definitions and urges customers to retrieve them before running the agents again. The vulnerability originates from a filename value derived from an OpenAPI or Swagger document.

Key details

• Progress disclosed a critical command injection flaw in DataDirect Autonomous REST Connector AI Model Generator agents.
• The vulnerability allows malicious OpenAPI or Swagger documents to execute arbitrary OS commands.
• The flaw originates from a filename value derived from an OpenAPI or Swagger document used in a shell operation without sufficient validation.
• Shell-based temporary-file cleanup instructions are the affected execution path where attacker-controlled commands can run.
• Exploitation can affect developer workspaces or CI environments where the agent runs, potentially creating unexpected files or commands.
• The vulnerability does not generate a specific product error message, so exploitation cannot be identified by obvious application warnings.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.