Exploit
Critical CVE-2026-91140 in Progress DataDirect ARCGenAI Agents Patched
October 7, 2026
Cybersecurity
Exploit
Key Facts
Signal Type
Exploit
Industry
Cybersecurity
Companies
Progress Software
Date
October 7, 2026
Progress Software disclosed a critical OS command injection vulnerability (CVE-2026-91140, CVSS 9.6) in its DataDirect Autonomous REST Connector GenAI Agents. Attackers can exploit the flaw by sending crafted OpenAPI or Swagger documents containing shell metacharacters in filenames, leading to arbitrary command execution. Progress released a patch in version 2.1 of the agent definitions; no public proof-of-concept or in-the-wild exploitation has been observed as of disclosure.
Any organization using Progress DataDirect Autonomous REST Connector GenAI Agents prior to version 2.1 is affected. This includes enterprises that leverage AI agents for automated data retrieval and integration via OpenAPI/Swagger specifications, particularly those in supply-chain-heavy industries.
This event underscores a growing structural risk in AI-agent supply chains where configuration inputs are treated as trusted. The lack of automated compliance checks and security certification standards amplifies the attack surface. For vendors in patch management, security scanning, SBOM, and compliance tooling, this is a high-priority trigger for outreach.
Monitor whether a public exploit surfaces in the coming weeks — the CVSS9.6 score increases the likelihood of weaponization. Also track if Progress’s patch rollout is adopted quickly; delays could lead to incidents. Regulatry scrutiny around AI-agent security certification may accelerate following this disclosure.
Source:
ThreatCluster Threat FeedGet cybersecurity signals in your CRM
Data breaches, ransomware events, funding rounds, and M&A across security vendors and targets.
