Critical 9.8Published Oct 19, 2026

CVE-2026-109444OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection

Updated under an hour ago (Oct 28, 2026, 5:00 AM ET)

Does this affect you?

It affects Tracer-Cloud opensre. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.70%, higher than 53% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Tracer-Cloud opensre

Exploited in the last 30 days

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-862
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.70% (percentile 53)
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Oct 22, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Tracer-Cloud opensre tracer_cloud:opensre (from the name)	through 0.1.2026.10.19	CNA record

References

References

https://www.lasso.security/vulnerability-database/cve-2026-109444	technical-description, exploit
https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/tools/interactive_shell/subprocess_presenter.py#L41	technical-description
https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/gateway/transports/slack/processing/dispatcher.py#L276	technical-description
https://www.vulncheck.com/advisories/opensre-through-0.1.2026.10.19-approval-gate-bypass-via-shell-run-prompt-injection	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.