A vulnerability (CVE-2026-126767) was found in OpsTree REMS versions up to 1.0.0, affecting its chat assistant feature. The vulnerability, a prompt injection issue, allows authenticated users to access the system's internal prompt by submitting specially crafted chat input to the /api/v1/rca/chat endpoint. This enables attackers to bypass the assistant's rules and obtain sensitive orchestration instructions, facilitating further prompt injection attacks. This matters to AI developers and operators as it compromises the security of the chat assistant, potentially allowing malicious users to manipulate the system and gain unauthorized access to internal information.