A vulnerability described as critical has been identified in Eclipse Theia. This affects the function
pull_request_target of the file github/workflows/preview.yml. The manipulation results in inclusion of functionality from untrusted control sphere.
This vulnerability was named CVE-2026-1699. The attack may be performed from remote. There is no available exploit.
Applying a patch is advised to resolve this issue.
