HighVulnerability
CVE-2026-109443: JoySafeter remote code execution via unsandboxed execute tool in Copilot
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-109443
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
JoySafeter through 1.0.0 contains a remote code execution flaw in its unsandboxed execute tool, reachable in Copilot standard mode. An authenticated user can self-register, select standard mode through the WebSocket chat.start extension, and have the agent call subprocess.run with shell=True on the host, which exposes other tenants' data and server secrets.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-77926: Aix-DB remote code execution through ChatBI common agent execute toolSimilar attack · NVD/CVE Database
- CriticalCVE-2026-75128: Langchain-Chatchat unauthenticated shell command executionSimilar attack · NVD/CVE Database
- HighCVE-2026-107366: IBM Langflow OSS message endpoints lack ownership verificationSimilar attack · NVD/CVE Database
- HighCVE-2026-53995: MLflow path traversal in FileStore trace writes via POST /api/3.0/mlflow/tracesSimilar attack · NVD/CVE Database
- MediumGHSA-2658-85cv-9wwq: Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLSimilar attack · GitHub Advisory Database