CVE-2026-43990

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43990", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-04T20:24:31.917Z", "datePublished": "2026-05-12T16:22:22.326Z", "dateUpdated": "2026-05-12T19:01:36.775Z"}, "containers": {"cna": {"title": "JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper", "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "lang": "en", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-78", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-gpvm-3chf-2649", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-gpvm-3chf-2649"}, {"name": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "tags": ["x_refsource_MISC"], "url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6"}, {"name": "https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1", "tags": ["x_refsource_MISC"], "url": "https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1"}], "affected": [{"vendor": "Dragonmonk111", "product": "junoclaw", "versions": [{"version": "< v0.x.y-security-1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-12T16:22:22.326Z"}, "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument string to the shell's parser, allowing shell metacharacters in agent-supplied arguments to be interpreted as command syntax. This vulnerability is fixed in 0.x.y-security-1."}], "source": {"advisory": "GHSA-gpvm-3chf-2649", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-12T19:01:27.345836Z", "id": "CVE-2026-43990", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-12T19:01:36.775Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43990", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-12T19:01:27.345836Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-12T19:01:31.405Z"}}], "cna": {"title": "JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper", "source": {"advisory": "GHSA-gpvm-3chf-2649", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Dragonmonk111", "product": "junoclaw", "versions": [{"status": "affected", "version": "< v0.x.y-security-1"}]}], "references": [{"url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-gpvm-3chf-2649", "name": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-gpvm-3chf-2649", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "name": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1", "name": "https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument string to the shell's parser, allowing shell metacharacters in agent-supplied arguments to be interpreted as command syntax. This vulnerability is fixed in 0.x.y-security-1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-12T16:22:22.326Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43990", "state": "PUBLISHED", "dateUpdated": "2026-05-12T19:01:36.775Z", "dateReserved": "2026-05-04T20:24:31.917Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-12T16:22:22.326Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "junoclaw", "vendor": "Dragonmonk111", "versions": [{"status": "affected", "version": "< v0.x.y-security-1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument string to the shell's parser, allowing shell metacharacters in agent-supplied arguments to be interpreted as command syntax. This vulnerability is fixed in 0.x.y-security-1."}, {"lang": "es", "value": "JunoClaw es una plataforma de IA ag\u00e9ntica construida sobre Juno Network. Antes de 0.x.y-security-1, el run_command de plugin-shell envolv\u00eda cada comando proporcionado por el agente en \u2019sh -c\u2019 / \u2019cmd /C\u2019 y pasaba la cadena completa de argumentos al analizador del shell, permitiendo que los metacaracteres del shell en los argumentos proporcionados por el agente fueran interpretados como sintaxis de comando. Esta vulnerabilidad est\u00e1 corregida en 0.x.y-security-1."}], "id": "CVE-2026-43990", "lastModified": "2026-10-26T18:10:00.173", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43990", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-12T19:01:27.345836Z", "version": "2.0.3"}}]}, "published": "2026-05-12T17:16:20.953", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6"}, {"source": "security-advisories@github.com", "url": "https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1"}, {"source": "security-advisories@github.com", "url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-gpvm-3chf-2649"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}, {"lang": "en", "value": "CWE-78"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,v0.x.y-security-1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "junoclaw", "source": "cna", "vendor": "Dragonmonk111"}, "product": "junoclaw", "vendor": "dragonmonk111"}], "created": "2026-05-12T17:45:20.457628+00:00", "updated": "2026-05-13T10:38:40.042564+00:00", "vendors": ["dragonmonk111", "dragonmonk111$PRODUCT$junoclaw"]}