{"id":"CVE-2026-109444","summary":"OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection","details":"OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.","modified":"2026-10-20T10:46:04.020634071Z","published":"2026-10-20T00:46:07.986Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109444.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-862"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109444.json"},{"type":"PACKAGE","url":"https://github.com/Tracer-Cloud/opensre"},{"type":"ARTICLE","url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/gateway/transports/slack/processing/dispatcher.py#L276"},{"type":"ARTICLE","url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/tools/interactive_shell/subprocess_presenter.py#L41"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109444"},{"type":"EVIDENCE","url":"https://www.lasso.security/vulnerability-database/cve-2026-109444"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/opensre-through-0.1.2026.10.19-approval-gate-bypass-via-shell-run-prompt-injection"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tracer-cloud/opensre","events":[{"introduced":"0"},{"last_affected":"8eba8c9301fa954d9eecb1693b7e2021215ec2ec"}],"database_specific":{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandardRange","range":[{"introduced":"0"},{"last_affected":"0.1.2026.10.19"}]}]}}],"versions":["v0.1.2026.10.19","v0.1.2026.10.18","v0.1.2026.10.17","v0.1.2026.10.16","v0.1.2026.10.15","v0.1.2026.10.14","v0.1.2026.10.13","v0.1.2026.10.12","v0.1.2026.10.11","v0.1.2026.10.10","v0.1.2026.10.9","v0.1.2026.10.8","v0.1.2026.10.7","v0.1.2026.10.6","v0.1.2026.10.5","v0.1.2026.10.4","v0.1.2026.10.3","v0.1.2026.10.2","v0.1.2026.10.1","v0.1.2026.9.30","v0.1.2026.9.29.1","v0.1.2026.9.29","v0.1.2026.9.28","v0.1.2026.9.27","v0.1.2026.9.26","v0.1.2026.9.25","v0.1.2026.9.24","v0.1.2026.9.22","v0.1.2026.9.21","v0.1.2026.9.20","v0.1.2026.9.19","v0.1.2026.9.18","v0.1.2026.9.17","v0.1.2026.9.16","v0.1.2026.9.15","v0.1.2026.9.14","v0.1.2026.9.13","v0.1.2026.9.12","v0.1.2026.9.11","v0.1.2026.9.10","v0.1.2026.9.9","v0.1.2026.9.8","v0.1.2026.9.7","v0.1.2026.9.6","v0.1.2026.9.5","v0.1.2026.9.4","v0.1.2026.9.3","v0.1.2026.9.2","v0.1.2026.9.1","v0.1.2026.8.31","v0.1.2026.8.30","v0.1.2026.8.29","v0.1.2026.8.28","v0.1.2026.8.27","v0.1.2026.8.26","v0.1.2026.8.25","v0.1.2026.8.24","v0.1.2026.8.23","v0.1.2026.8.22","v0.1.2026.8.21","v0.1.2026.8.20","v0.1.2026.8.19","v0.1.2026.8.18","v0.1.2026.8.17","v0.1.2026.8.16","v0.1.2026.8.15","v0.1.2026.8.14","v0.1.2026.8.13","v0.1.2026.8.12","v0.1.2026.8.11","v0.1.2026.8.10","v0.1.2026.8.9","v0.1.2026.8.8","v0.1.2026.8.6","v0.1.2026.8.5","v0.1.2026.8.4","v0.1.2026.8.3","v0.1.2026.8.2","v0.1.2026.8.1","v0.1.2026.7.31","v0.1.2026.7.30","v0.1.2026.7.29","v0.1.2026.7.28","v0.1.2026.7.27","v0.1.2026.7.26","v0.1.2026.7.25","v0.1.2026.7.24","v0.1.2026.7.23","v0.1.2026.7.22","v0.1.2026.7.21","v0.1.2026.7.20","v0.1.2026.7.19","v0.1.2026.7.18","v0.1.2026.7.17","v0.1.2026.7.16","v0.1.2026.7.15","v0.1.2026.7.14","v0.1.2026.7.13","v0.1.2026.7.11","v0.1.2026.7.10","v0.1.2026.7.9","v0.1.2026.7.8","v0.1.2026.7.7","v0.1.2026.7.6","v0.1.2026.7.5","v0.1.2026.7.4","v0.1.2026.7.3","v0.1.2026.7.2","v0.1.2026.7.1","v0.1.2026.6.30","v0.1.2026.6.29","v0.1.2026.6.28","v2026.6.26","v2026.6.25","v2026.6.24","v2026.6.23","v2026.6.22","v2026.6.21","v2026.6.20","v2026.6.19","nightly","v2026.6.17","v2026.6.16","v2026.6.15","v2026.6.14","v2026.6.13","v2026.6.12","v2026.6.11","v2026.6.10","v2026.6.9","v2026.6.8","v2026.6.7","v2026.6.6","v2026.6.5","v2026.6.4","v2026.6.3","v2026.6.2","v2026.6.1","v2026.5.31","v2026.5.30","v2026.5.29","v2026.5.28","v2026.5.27","v2026.5.26","v2026.5.25","v2026.5.24","v2026.5.23","v2026.5.22","v2026.5.21","v2026.5.20","v2026.5.19","v2026.5.18","v2026.5.17","v2026.5.16","v0.1","v2026.5.15","v2026.5.14","v2026.5.13","v2026.5.12","v2026.5.11","v2026.5.10","v2026.5.9","v2026.5.8","v2026.5.7","v2026.5.6","v2026.5.4","v2026.5.3","v2026.5.2","v2026.4.30","v2026.4.29","v2026.4.28","v2026.4.27","v2026.4.26","v2026.4.25","v2026.4.24","v2026.4.23","v2026.4.22","v2026.4.21","v2026.4.20","v2026.4.19","v2026.4.18","v2026.4.17","v2026.4.16","v2026.4.13","v2026.4.12","v2026.4.11","v2026.4.10","v2026.4.9","v2026.4.8","v2026.4.7","v2026.4.5","v0.1.3","0.1.2","0.1.1","v0.1.2","manual-2852fbc","v0.1.1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-109444.json"}}],"schema_version":"1.9.1","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}