CVE-2026-91140: OS command injection in Progress Software Autonomous REST Connector GenAI Agents

Shell-based temporary-file cleanup instructions in ARCGenAI-Generator 2.0 contain an OS command injection flaw. An attacker who supplies a crafted Swagger/OpenAPI document can run arbitrary commands on a developer’s machine when a user invokes the generator.

CVE ID

CVE-2026-91140

Vendor

Progress DataDirect

Product

Autonomous REST Connector GenAI Agents (ARCGenAI-Generator)

Weakness

CWE-78 — Improper Neutralization of Special Elements used in an OS Command

CVSS 3.1

9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected

ARCGenAI-Generator 2.0

Fixed in

2.1

Published

Oct 06, 2026

Credit

Abhishek Nandkumar Bhaskar (Abhi-Hackz) — finder

Assigner (CNA)

Progress Software

Remediation

Upgrade ARCGenAI-Generator to version 2.1 or later. Until then, do not process untrusted Swagger/OpenAPI documents.

References

About this disclosure

This vulnerability was found and reported by Abhishek Nandkumar Bhaskar (Abhi HackZ, credited in the CVE record as Abhi-Hackz) through the Progress DataDirect VDP (Bugcrowd), and credited to him as finder in the official CVE record assigned by Progress Software as the CVE Numbering Authority. Proof-of-concept details are withheld; the facts on this page are taken from the public CVE record and the vendor advisory. For the background and the bug class explained, read Four CVEs in Progress Software Products and From a Bugcrowd VDP Report to a Published CVE.

Other CVEs credited to Abhishek Bhaskar