CVE-2026-109444 OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-109444?
CVE-2026-109444 is a critical vulnerability in Tracer-Cloud opensre, published on 20 Oct 2026.
Official description
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.
Weakness: CWE-862
Which versions are affected by CVE-2026-109444?
How do I fix CVE-2026-109444?
No fix has been published for CVE-2026-109444 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-109444 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-109444 exists.
Sources
Also known as GHSA-fqh3-76w5-5vvf.