VulnSocial

CVE-2026-109444

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-20: 210-20
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Basant Pandey@Basant_Pandey

    An approval gate that auto-approves when nobody's watching isn't a gate. @LassoSecurity found OpenSRE's shell_run never asks for approval, and headless runs auto-allow every call. One crafted alert can run commands with the agent's creds (CVE-2026-109444). Fail closed.

    1000017
    25 followersView on X
  • Basant Pandey@Basant_Pandey

    @LassoSecurity Lasso's write-up: https://www.lasso.security/vulnerability-database/cve-2026-109444

    0000016
    25 followersView on X

Explore more

Back to dashboard