{"data":{"id":"02afda8f-5873-4a3f-87ec-b31327c7a2c4","title":"CVE-2026-109443: JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run…","summary":"JoySafeter through 1.0.0 contains a remote code execution flaw in its unsandboxed execute tool, reachable in Copilot standard mode. An authenticated user can self-register, select standard mode through the WebSocket chat.start extension, and have the agent call subprocess.run with shell=True on the host, which exposes other tenants' data and server secrets.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-109443","publishedAt":"2026-10-20T01:17:10.527Z","cveId":"CVE-2026-109443","cweIds":["CWE-653"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["JoySafeter","Copilot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"JoySafeter remote code execution via unsandboxed execute tool in Copilot","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-20T06:15:30.051Z","kevDateAdded":null,"advisoryAliases":["GHSA-qmmc-575c-v2h8"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-20T06:15:34.193Z","patchAvailable":null,"disclosureDate":"2026-10-20T01:17:10.527Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}