CVE-2026-43991

{
  "id": "CVE-2026-43991",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-12T17:16:21.090",
  "lastModified": "2026-10-26T18:10:00.173",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1."
    },
    {
      "lang": "es",
      "value": "JunoClaw es una plataforma de IA agéntica construida sobre la Red Juno. Antes de 0.x.y-security-1, la lista negra basada en subcadenas en la verificación de seguridad de comandos del plugin-shell podía ser eludida mediante construcciones de argumentos adversarios, permitiendo la ejecución de comandos no autorizados en el host cuando se combinaba con el aviso complementario. Antes del parche, la verificación se aplicaba a la cadena de comando sin procesar en lugar del primer token analizado. Esta vulnerabilidad está corregida en 0.x.y-security-1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Dragonmonk111",
          "product": "junoclaw",
          "versions": [
            {
              "version": "< v0.x.y-security-1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.4,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-13T14:11:10.828920Z",
          "id": "CVE-2026-43991",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        },
        {
          "lang": "en",
          "value": "CWE-184"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/Dragonmonk111/junoclaw/commit/2bc54f6",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-fvq5-79h6-952c",
      "source": "[email protected]"
    }
  ]
}