Weaknesses of type CWE-1427
11 resultsCVE-2026-44717CRITICALMCP Calculate Server: Prompt Injection to RCEEPSS 0.5%CVE-2024-3303MEDIUMImproper Neutralization of Input Used for LLM Prompting in GitLabEPSS 0.4%CVE-2026-46580HIGHIn Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded andEPSS 0.3%CVE-2026-44688HIGHIn Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context withEPSS 0.3%CVE-2026-4399HIGHMultiple vulnerabilities in 1millionbot Millie chatbotEPSS 0.3%CVE-2026-44246HIGHnnU-Net: Agentic workflow injection in `.github/workflows/issue-triage.yml` of `MIC-DKFZ/nnUNet`EPSS 0.2%CVE-2025-64321MEDIUMImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating WriteableEPSS 0.2%CVE-2025-64318MEDIUMImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating WriteEPSS 0.2%CVE-2025-64320MEDIUMImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This isEPSS 0.2%CVE-2025-10875MEDIUMImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.ThiEPSS 0.2%CVE-2025-36730MEDIUMWindsurf Prompt Injection via FilenameEPSS 0.2%