---
title: Vikunja's veans coding-agent hook pasted project titles and task text into the agent's authoritative instructions, letting any project writer steer it (CVE-2026-123498, fixed in 2.7.1) | ctxsec
url: https://ctxsec.com/items/vikunja-veans-cve-2026-123498-task-text-prompt-injection-agent-2-7-1
description: "Before 2.7.1, veans loaded project titles and task descriptions verbatim into the coding agent's instruction block on SessionStart and PreCompact. A project member with write access could put instructions there that made the agent change the developer's checkout or run commands. Rated low (CVSS 3.1 3.7) because it needs write access and user interaction, but it is a clean example of untrusted data landing in the trusted part of an agent's context."
status: "official advisory (Vikunja GHSA-cvh3-hf56-g9xm / GHSA-3v4w-4754-gmfj, Nov 8); low severity"
published: 2026-11-09
---

> Before 2.7.1, veans loaded project titles and task descriptions verbatim into the coding agent's instruction block on SessionStart and PreCompact. A project member with write access could put instructions there that made the agent change the developer's checkout or run commands. Rated low (CVSS 3.1 3.7) because it needs write access and user interaction, but it is a clean example of untrusted data landing in the trusted part of an agent's context.

[← Context & Harness Attacks](/context) · [markdown](/items/vikunja-veans-cve-2026-123498-task-text-prompt-injection-agent-2-7-1.md)

official advisory (Vikunja GHSA-cvh3-hf56-g9xm / GHSA-3v4w-4754-gmfj, Nov 8); low severity

2026-11-09

### Vikunja's veans coding-agent hook pasted project titles and task text into the agent's authoritative instructions, letting any project writer steer it (CVE-2026-123498, fixed in 2.7.1)

- Update veans to 2.7.1.
- For any agent hook you write: put tracker or ticket text in a clearly marked untrusted section, never in system or project instructions.

Sources: [GitHub Advisory: GHSA-3v4w-4754-gmfj](https://github.com/advisories/GHSA-3v4w-4754-gmfj) · [Vikunja advisory GHSA-cvh3-hf56-g9xm](https://github.com/go-vikunja/vikunja/security/advisories/GHSA-cvh3-hf56-g9xm)