Summary
generated automatically from NVD dataOpenSRE through 0.1.2026.10.19 has a missing authorization flaw (CWE-862) in its approval gate: the headless presenter's execution_allowed() always returns True, so shell_run commands run without any confirmation. An attacker can plant instructions in alerts or Slack messages that the agent triages, causing commands to execute on the host and exposing LLM, Slack and cloud credentials. The flaw is rated CRITICAL with a CVSS v3.1 score of 9.8.
NVD description
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.
EPSS · FIRST.org
0.45%probability of exploitation in the next 30 days
Higher than 38% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-22, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 20 oct. 2026
- Updated
- 22 oct. 2026
- Status
- Deferred
- Source
- disclosure@vulncheck.com
Weaknesses (CWE)
References (4)
Similar CVEs
Other vulnerabilities of type CWE-862
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.