4 min read
News Brief CVE-2026-109440 (CVSS 4.0 8.7, CNA score) covers LangAlpha through 2026.09.07, an open-source financial-research agent. Web content the agent reads can steer it into shell and Python execution and secret theft, and we found no evidence of a fixed version as of October 27, 2026.