CVE-2026-43991

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6
https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c

Configurations

No configuration.

History

26 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) JunoClaw es una plataforma de IA agéntica construida sobre la Red Juno. Antes de 0.x.y-security-1, la lista negra basada en subcadenas en la verificación de seguridad de comandos del plugin-shell podía ser eludida mediante construcciones de argumentos adversarios, permitiendo la ejecución de comandos no autorizados en el host cuando se combinaba con el aviso complementario. Antes del parche, la verificación se aplicaba a la cadena de comando sin procesar en lugar del primer token analizado. Esta vulnerabilidad está corregida en 0.x.y-security-1.

Information

Published : 2026-05-12 17:16

Updated : 2026-10-26 18:10

NVD link : CVE-2026-43991

Mitre link : CVE-2026-43991

CVE.ORG link : CVE-2026-43991

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-184

Incomplete List of Disallowed Inputs

{"id": "CVE-2026-43991", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43991", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-13T14:11:10.828920Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Dragonmonk111", "product": "junoclaw", "versions": [{"status": "affected", "version": "< v0.x.y-security-1"}]}]}], "published": "2026-05-12T17:16:21.090", "references": [{"url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "source": "security-advisories@github.com"}, {"url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-78"}, {"lang": "en", "value": "CWE-184"}]}], "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1."}, {"lang": "es", "value": "JunoClaw es una plataforma de IA ag\u00e9ntica construida sobre la Red Juno. Antes de 0.x.y-security-1, la lista negra basada en subcadenas en la verificaci\u00f3n de seguridad de comandos del plugin-shell pod\u00eda ser eludida mediante construcciones de argumentos adversarios, permitiendo la ejecuci\u00f3n de comandos no autorizados en el host cuando se combinaba con el aviso complementario. Antes del parche, la verificaci\u00f3n se aplicaba a la cadena de comando sin procesar en lugar del primer token analizado. Esta vulnerabilidad est\u00e1 corregida en 0.x.y-security-1."}], "lastModified": "2026-10-26T18:10:00.173", "sourceIdentifier": "security-advisories@github.com"}