Progress DataDirect GenAI flaw CVE-2026-91140 flagged

CVE-2026-91140 is a critical command-injection flaw in Progress DataDirect GenAI files before version 2.1; Canada issued AV26-1005 and no active exploitation is reported.

On October 6, 2026, the Canadian Centre for Cyber Security issued advisory AV26-1005 for CVE-2026-91140 in Progress Software's Autonomous REST Connector GenAI component, ARCGenAI-Generator, before version 2.1, pointing to a September 2026 Progress DataDirect critical security alert and urging administrators to apply updates. Cyber Security News and GBHackers, reporting on October 7, describe a critical command-injection flaw in early-access DataDirect Autonomous REST Connector AI Model Generator definitions: a filename taken from an OpenAPI or Swagger document is used in a shell command without sufficient validation, so a crafted document can run arbitrary OS commands. Those outlets name ARCGenAI-Generator.agent.md 2.0, ARCGenAI-Generator.prompt.md 1.0, and ARCGenAI-EntityGen.agent.md 1.0 as affected, with fixes in version 2.1 definitions that customers should pull from GitHub; no installer is required. Progress reports no distinctive error when the flaw is triggered, and GBHackers says Progress published no CVSS score even though coverage calls the issue critical. The Canadian bulletin and GBHackers say there is no evidence of active exploitation, and reported impact is limited to generator workspaces and CI environments. Sources differ in detail: Canada refers broadly to ARCGenAI-Generator before 2.1, while the later reports specify three definition files, and one describes a temporary-file cleanup command while another says the filename is passed into a shell without proper quoting.