CVE-2026-43990

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument string to the shell's parser, allowing shell metacharacters in agent-supplied arguments to be interpreted as command syntax. This vulnerability is fixed in 0.x.y-security-1.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6
https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1
https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-gpvm-3chf-2649

Configurations

No configuration.

History

26 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) JunoClaw es una plataforma de IA agéntica construida sobre Juno Network. Antes de 0.x.y-security-1, el run_command de plugin-shell envolvía cada comando proporcionado por el agente en ’sh -c’ / ’cmd /C’ y pasaba la cadena completa de argumentos al analizador del shell, permitiendo que los metacaracteres del shell en los argumentos proporcionados por el agente fueran interpretados como sintaxis de comando. Esta vulnerabilidad está corregida en 0.x.y-security-1.

Information

Published : 2026-05-12 17:16

Updated : 2026-10-26 18:10

NVD link : CVE-2026-43990

Mitre link : CVE-2026-43990

CVE.ORG link : CVE-2026-43990

JSON object : View

Products Affected

No product.

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-43990", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43990", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-12T19:01:27.345836Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Dragonmonk111", "product": "junoclaw", "versions": [{"status": "affected", "version": "< v0.x.y-security-1"}]}]}], "published": "2026-05-12T17:16:20.953", "references": [{"url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "source": "security-advisories@github.com"}, {"url": "https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1", "source": "security-advisories@github.com"}, {"url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-gpvm-3chf-2649", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-77"}, {"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument string to the shell's parser, allowing shell metacharacters in agent-supplied arguments to be interpreted as command syntax. This vulnerability is fixed in 0.x.y-security-1."}, {"lang": "es", "value": "JunoClaw es una plataforma de IA ag\u00e9ntica construida sobre Juno Network. Antes de 0.x.y-security-1, el run_command de plugin-shell envolv\u00eda cada comando proporcionado por el agente en \u2019sh -c\u2019 / \u2019cmd /C\u2019 y pasaba la cadena completa de argumentos al analizador del shell, permitiendo que los metacaracteres del shell en los argumentos proporcionados por el agente fueran interpretados como sintaxis de comando. Esta vulnerabilidad est\u00e1 corregida en 0.x.y-security-1."}], "lastModified": "2026-10-26T18:10:00.173", "sourceIdentifier": "security-advisories@github.com"}