OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without…
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by the agent to run commands on the host and exfiltrate LLM, Slack and cloud credentials.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Slack
- CVSS
- 8.8
Why it ranks 10 (Routine)
- CVSS 8.8 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.