CVE-2026-109444

Deferred Deferred - Pending Action

Approval Gate Bypass in OpenSRE Allows Arbitrary Command Execution

Publication date: 2026-10-20

Last updated on: 2026-10-22

Assigner: VulnCheck

Description

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-22

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-07

NVD

CVE-2026-109444

EUVD

EUVD-2026-104684

Affected Vendors & Products

Vendor	Product	Version / Range
Tracer-Cloud	opensre	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

OpenSRE through 0.1.2026.10.19 has an approval gate bypass flaw where the headless presenter's execution_allowed() function always returns True. This allows attackers to inject malicious shell_run commands into alerts or Slack messages processed by the agent. The commands execute on the host system without proper authorization, enabling credential theft and unauthorized actions.

Detection Guidance

Check OpenSRE logs for unauthorized shell_run command executions or Slack message processing anomalies. Inspect dispatcher.py and subprocess_presenter.py for unexpected command invocations. Monitor network traffic for exfiltration of credentials.

Impact Analysis

Attackers can exploit this to run arbitrary commands on your system by tricking the agent via malicious alerts or Slack messages. This could lead to theft of sensitive credentials like LLM, Slack, and cloud credentials. Unauthorized command execution may also compromise system integrity or exfiltrate data.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Upgrade OpenSRE to a version beyond 0.1.2026.10.19. Disable headless presenter execution_allowed() auto-approval. Implement strict input validation for Slack messages and alerts. Restrict shell_run command permissions.

Hi! I’m here to help you understand CVE-2026-109444. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...