{"id":"CVE-2026-106020","kind":"vulnerability","aliases":["CVE-2026-106020"],"related":[],"title":"Johnson Controls EasyIO Neo IO Manager: LLM prompt input flaw enables search order hijacking","description":"Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking.\n\nThis issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0.","summary":"Johnson Controls JCI-PSA-2026-15 lists EasyIO Neo IO Manager and Tools Installer 1.1.0.0 as affected by an uncontrolled library search path (search order hijacking). NVD attributes it to improper neutralization of LLM prompt input. CVSS 4.0 vector is local, high privileges, user interaction. Fix reported: IO Manager 2.0 / Tools-Installer 2.0.0.0. No exploitation reported.","severity":"high","cvss":8.6,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"EasyIO Neo IO Manager and Tools Installer","fixed":["2.0","Tools-Installer 2.0.0.0"],"affected":"1.1.0.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["building-automation","easyio","johnson-controls","other","windows"],"not_affected_if":[],"how_to_check":"Check the installed EasyIO Neo IO Manager / Tools Installer version; 1.1.0.0 is the affected version. Per the vendor, its uninstall steps refer to 1.0.0.0, so confirm the procedure with Johnson Controls. Also restrict write access to directories the tools load libraries from.","fix":"Upgrade to IO Manager 2.0 and Tools-Installer 2.0.0.0 (per Viakoo summary of JCI-PSA-2026-15; confirm in the vendor advisory)","status":"open","published_at":"2026-11-06T15:17:05+00:00","first_seen_at":"2026-11-06T15:42:43+00:00","triaged_at":"2026-11-06T15:44:06+00:00","updated_at":"2026-11-06T15:46:19+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-06T15:44:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Johnson Controls EasyIO Neo IO Manager: LLM prompt input flaw enables search order hijacking","impact":"medium","summary":"Johnson Controls EasyIO Neo IO Manager and Tools Installer version 1.1.0.0 contains an input neutralization flaw in LLM prompting that allows Search Order Hijacking. The sources do not describe what an attacker gains beyond that.","audience":"businesses","category":"other","nicknames":[],"who_cares":["easyio","johnson-controls","building-automation","windows"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; the sources do not describe the impact beyond search order hijacking","analyst_note":"Find the vendor advisory from Johnson Controls and confirm the affected version, the attack path, the fixed version and whether the LLM feature is enabled by default.","how_to_check":"- Check the installed version of EasyIO Neo IO Manager and Tools Installer; the affected version is `1.1.0.0`\n- unknown for other checks: the sources do not say","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"EasyIO Neo IO Manager and Tools Installer version 1.1.0.0 is named as affected. The sources do not describe the configuration or data path that makes a deployment exposed. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000691,"input_tokens":4230,"output_tokens":536,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the vendor advisory from Johnson Controls and confirm the affected version, the attack path, the fixed version and whether the LLM feature is enabled by default.","search":"'-106020':17A,20A '-15':43B '-2026':16A,19A '1.1.0.0':52B,128C '2.0':87B '2.0.0.0':91B '2026':42B '4.0':75B 'affect':54B,120C 'allow':114C 'and':25A 'attribut':65B 'autom':30B 'build':29B 'building-autom':28B 'control':2A,34B,38B,106C 'cve':15A,18A 'cvss':74B 'easyio':3A,21A,31B,45B,107C,121C 'enabl':11A 'exploit':93B 'fix':83B 'flaw':10A 'high':79B 'hijack':14A,63B,117C 'improp':68B,95C 'input':9A,73B,98C 'instal':51B,90B,113C,127C 'installer':27A 'interact':82B 'io':5A,23A,47B,85B,109C,123C 'issu':119C 'jci':40B 'jci-psa':39B 'johnson':1A,33B,37B,105C 'johnson-control':32B 'librari':58B 'list':44B 'llm':7A,71B,101C 'local':78B 'manag':6A,48B,86B,110C,124C 'manager':24A 'neo':4A,22A,46B,108C,122C 'neutral':69B,96C 'nvd':64B 'order':13A,62B,116C 'path':60B 'privileg':80B 'prompt':8A,72B,102C 'psa':41B 'report':84B,94B 'search':12A,59B,61B,115C 'tool':50B,89B,112C,126C 'tools':26A 'tools-instal':88B 'uncontrol':57B 'use':99C 'user':81B 'vector':76B 'vulner':103C 'window':36B","nicknames":[],"mitigations":[],"who_affected":"Windows workstations running EasyIO Neo IO Manager or Tools Installer 1.1.0.0, the commissioning tools for EasyIO building-automation controllers. The attack is local and needs high privileges plus user interaction, so the risk is mainly engineering workstations where others can plant files. Whether the LLM feature is on by default is not stated in the sources I read. Teams without these tools can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["easyioneoiomanagerandtoolsinstaller","neoiomanagerandtoolsinstaller"],"ptokens":["and","easyio","installer","io","manager","neo","tools"],"labels":["buildingautomation","easyio","high","johnsoncontrols","other","windows"],"campaign_type":null,"search_a":"'-106020':17A,20A '-2026':16A,19A 'and':25A 'control':2A 'cve':15A,18A 'easyio':3A,21A 'enabl':11A 'flaw':10A 'hijack':14A 'input':9A 'installer':27A 'io':5A,23A 'johnson':1A 'llm':7A 'manag':6A 'manager':24A 'neo':4A,22A 'order':13A 'prompt':8A 'search':12A 'tools':26A","search_b":"'-15':43B '1.1.0.0':52B '2.0':87B '2.0.0.0':91B '2026':42B '4.0':75B 'affect':54B 'attribut':65B 'autom':30B 'build':29B 'building-autom':28B 'control':34B,38B 'cvss':74B 'easyio':31B,45B 'exploit':93B 'fix':83B 'high':79B 'hijack':63B 'improp':68B 'input':73B 'instal':51B,90B 'interact':82B 'io':47B,85B 'jci':40B 'jci-psa':39B 'johnson':33B,37B 'johnson-control':32B 'librari':58B 'list':44B 'llm':71B 'local':78B 'manag':48B,86B 'neo':46B 'neutral':69B 'nvd':64B 'order':62B 'path':60B 'privileg':80B 'prompt':72B 'psa':41B 'report':84B,94B 'search':59B,61B 'tool':50B,89B 'tools-instal':88B 'uncontrol':57B 'user':81B 'vector':76B 'window':36B","search_c":"'1.1.0.0':128C 'affect':120C 'allow':114C 'control':106C 'easyio':107C,121C 'hijack':117C 'improp':95C 'input':98C 'instal':113C,127C 'io':109C,123C 'issu':119C 'johnson':105C 'llm':101C 'manag':110C,124C 'neo':108C,122C 'neutral':96C 'order':116C 'prompt':102C 'search':115C 'tool':112C,126C 'use':99C 'vulner':103C","first_public_at":"2026-11-06T15:17:05+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"productsecurity@jci.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-106020","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106020","severity":null,"published_at":"2026-11-06T15:17:05+00:00","modified_at":"2026-11-06T15:17:05+00:00","first_seen_at":"2026-11-06T15:42:43+00:00","fetched_at":"2026-11-06T15:42:43+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-106020:1906","url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","severity":null,"published_at":"2026-11-06T15:46:19+00:00","modified_at":"2026-11-06T15:46:19+00:00","first_seen_at":"2026-11-06T15:46:19+00:00","fetched_at":"2026-11-06T15:46:19+00:00","note":"Vendor index page confirms JCI-PSA-2026-15 (Nov 3 2026, with CVE-2026-106022, CVE-2026-64894). I could not open the advisory PDF itself. Fix and affected version come from a Viakoo OT news rewrite, so nothing is marked verified. LLM feature default state not found. No exploitation reported.","cites":["https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","https://www.viakoo.com/blog/daily-ot-security-news-november-05-2026/"]}],"documents":[{"id":54501,"url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","title":"Johnson Controls Product Security Advisories (lists JCI-PSA-2026-45, CVE-2026-106019)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":87608,"url":"https://www.viakoo.com/blog/daily-ot-security-news-november-05-2026/","title":"Daily OT Security News: November 05, 2026 (Viakoo)","kind":"blog","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}