CVE-2026-109444 — OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless prese…
Published: 2026-10-20 · CVSS: 9.3 · CVSS 4.0
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7