{"data":{"id":"65d4eaae-2bfd-424b-ad26-7879ceccce18","title":"CVE-2026-43991: JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in…","summary":"CVE-2026-43991 affects JunoClaw, an agentic AI platform built on Juno Network, before 0.x.y-security-1. A substring-based blocklist in the plugin-shell command-safety check, applied to the raw command string rather than the parsed first token, can be bypassed by adversarial argument constructions. When combined with the companion advisory, this allows unauthorized command execution on the host.","solution":"This vulnerability is fixed in 0.x.y-security-1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-43991","publishedAt":"2026-05-12T17:16:21.090Z","cveId":"CVE-2026-43991","cweIds":["CWE-78","CWE-184"],"cvssScore":"8.4","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["JunoClaw"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"JunoClaw plugin-shell safety check bypass enables host command execution","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00171,"epssCheckedAt":"2026-11-07T00:12:15.162Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T06:12:02.671Z","patchAvailable":null,"disclosureDate":"2026-05-12T17:16:21.090Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}