{"id":"CVE-2026-109444","title":"OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection","summary":"OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers ca…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-862"],"vendor":"Tracer-Cloud","product":"opensre","affected":["opensre <= 0.1.2026.10.19"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T00:46:07.986Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-109444","references":[{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109444","label":"Lasso.security Advisory"},{"url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/tools/interactive_shell/subprocess_presenter.py#L41"},{"url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/gateway/transports/slack/processing/dispatcher.py#L276"},{"url":"https://www.vulncheck.com/advisories/opensre-through-0.1.2026.10.19-approval-gate-bypass-via-shell-run-prompt-injection","label":"VulnCheck Advisory: OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T01:49:42.625Z","slug":"CVE-2026-109444","body":"## Overview\n\nOpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.\n\n## Affected\n\n- `opensre <= 0.1.2026.10.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}