Critical Progress DataDirect GenAI Flaw Lets Attackers Execute Arbitrary OS Commands

Progress disclosed a critical command-injection vulnerability (CVE-2026-91140) in its DataDirect Autonomous REST Connector AI Model Generator agents where unvalidated filename values from OpenAPI/Swagger documents can be used in shell operations to execute arbitrary OS commands; Progress published updated agent definitions (version 2.1) and urges users to update before running the agents again, noting the impact is limited to environments that process untrusted specifications (developer workspaces and CI) and there is no reported evidence of active exploitation.