CVE-2026-109443

JoySafeter versions up to and including 1.0.0 are vulnerable to a remote code execution (RCE) flaw. The issue stems from an unsandboxed execute tool within Copilot standard mode , where the agent can be manipulated to invoke subprocess.run with shell=True on the host system. Authenticated attacke...