A Filename Becomes a Weapon: Progress DataDirect’s ARCGenAI Agents Hit by Critical Command Injection

A filename becomes a weapon Progress Software disclosed a critical vulnerability this week in its DataDirect Autonomous REST Connector GenAI Agents. Tracked as CVE-2026-91140, the flaw carries a CVSS score of 9.6 and allows an attacker to…