CVE-2026-43991

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43991", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-04T20:24:31.917Z", "datePublished": "2026-05-12T16:19:54.198Z", "dateUpdated": "2026-05-13T14:11:22.996Z"}, "containers": {"cna": {"title": "JunoClaw: plugin-shell shell-injection bypass via substring blocklist", "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-184", "lang": "en", "description": "CWE-184: Incomplete List of Disallowed Inputs", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c"}, {"name": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "tags": ["x_refsource_MISC"], "url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6"}], "affected": [{"vendor": "Dragonmonk111", "product": "junoclaw", "versions": [{"version": "< v0.x.y-security-1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-12T16:19:54.198Z"}, "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1."}], "source": {"advisory": "GHSA-fvq5-79h6-952c", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-13T14:11:10.828920Z", "id": "CVE-2026-43991", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T14:11:22.996Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43991", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-13T14:11:10.828920Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T14:11:19.825Z"}}], "cna": {"title": "JunoClaw: plugin-shell shell-injection bypass via substring blocklist", "source": {"advisory": "GHSA-fvq5-79h6-952c", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Dragonmonk111", "product": "junoclaw", "versions": [{"status": "affected", "version": "< v0.x.y-security-1"}]}], "references": [{"url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c", "name": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "name": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-184", "description": "CWE-184: Incomplete List of Disallowed Inputs"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-12T16:19:54.198Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43991", "state": "PUBLISHED", "dateUpdated": "2026-05-13T14:11:22.996Z", "dateReserved": "2026-05-04T20:24:31.917Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-12T16:19:54.198Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "junoclaw", "vendor": "Dragonmonk111", "versions": [{"status": "affected", "version": "< v0.x.y-security-1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1."}, {"lang": "es", "value": "JunoClaw es una plataforma de IA ag\u00e9ntica construida sobre la Red Juno. Antes de 0.x.y-security-1, la lista negra basada en subcadenas en la verificaci\u00f3n de seguridad de comandos del plugin-shell pod\u00eda ser eludida mediante construcciones de argumentos adversarios, permitiendo la ejecuci\u00f3n de comandos no autorizados en el host cuando se combinaba con el aviso complementario. Antes del parche, la verificaci\u00f3n se aplicaba a la cadena de comando sin procesar en lugar del primer token analizado. Esta vulnerabilidad est\u00e1 corregida en 0.x.y-security-1."}], "id": "CVE-2026-43991", "lastModified": "2026-10-26T18:10:00.173", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43991", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-13T14:11:10.828920Z", "version": "2.0.3"}}]}, "published": "2026-05-12T17:16:21.090", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6"}, {"source": "security-advisories@github.com", "url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}, {"lang": "en", "value": "CWE-184"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,<v0.x.y-security-1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "junoclaw", "source": "cna", "vendor": "Dragonmonk111"}, "product": "junoclaw", "vendor": "dragonmonk111"}], "created": "2026-05-12T17:45:20.458106+00:00", "updated": "2026-05-13T10:38:42.503330+00:00", "vendors": ["dragonmonk111", "dragonmonk111$PRODUCT$junoclaw"]}