Skip to content
Submit incident
AII-1001-48723
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Eclipse Theia IDE automatically executes code from settings.json

Eclipse Theia IDE automatically loads and executes arbitrary code from MCP configuration files in .theia\settings.json when a source code directory is opened. The vulnerability was discovered on November 17, 2025 and disclosed to Eclipse on November 18, 2025.

17 November 2025 · Eclipse Foundation · Security and cyberattacks
17 November 2025

Drafted by Raidu Incident Detection, an automated system.

AII-1001-487232 sources ↓
Quick facts
Category
Security and cyberattacks
Source
gitlab.eclipse.org
Date
17 November 2025
Drafted by
Raidu Incident Detection

What happened

The Eclipse Theia IDE automatically loads MCP configurations from the .theia\settings.json file upon opening a source code directory.

This file can contain arbitrary code that will execute without any further user interaction.

Classification

Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Harm status
Potential harm
Intent
Unintentional
Timing
Post-deployment
Failure modes
Unsafe autonomous behaviour
Consequences
None recorded
AI systems
Eclipse Theia IDE

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

gitlab.eclipse.org
Eclipse Theia Gitlab Issue Tracker #318
mindgard.ai
Mindgard Disclosure