High severity8.8NVD Advisory· Published Oct 20, 2026
CVE-2026-109444
CVE-2026-109444
Description
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.
Affected products
1- Range: <=0.1.2026.10.19
Patches
Vulnerability mechanics
References
4- github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/gateway/transports/slack/processing/dispatcher.pynvd
- github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/tools/interactive_shell/subprocess_presenter.pynvd
- www.lasso.security/vulnerability-database/cve-2026-109444nvd
- www.vulncheck.com/advisories/opensre-through-0.1.2026.10.19-approval-gate-bypass-via-shell-run-prompt-injectionnvd
News mentions
0No linked articles in our index yet.