CVE-2026-5556General

LOWCVSS 2.1 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/coding-agent/src/core/extensions/loader.ts. The manipulation leads to code injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-05: 3Technical Details · 2026-04-05: 304-05
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5556 - badlogic pi-mono loader.ts discoverAndLoadExtensions code injection Intel Report: https://ift.tt/9zx0tf4

    Post summary

    The tweet announces CVE-2026-5556, describing a code injection vulnerability in the badlogic pi-mono loader.ts, but provides no PoC, exploit, or patch details.

    0000040
    281 followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-5556 A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/codi… https://www.cve.org/CVERecord?id=CVE-2026-5556 ----- Traducción: CVE-2026-5556 Se … http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-5556 in badlogic pi-mono up to 0.58.4, noting it affects the discoverAndLoadExtensions function, but does not provide any exploit, patch, or active exploitation details.

    0000039
    63 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-5556 A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/codi… https://www.cve.org/CVERecord?id=CVE-2026-5556

    Post summary

    CVE-2026-5556 is disclosed for badlogic pi-mono up to 0.58.4, affecting discoverAndLoadExtensions, but no PoC, exploit, or patch details are given.

    00000287
    56.8K followersView on X

Explore more