CVE-2026-109443 Details

A remote code execution vulnerability has been identified in JoySafeter versions through 1.0.0. This vulnerability allows authenticated users to execute operating system commands via an unsandboxed execution tool in the Copilot standard mode. Attackers can self-register, choose standard mode in the WebSocket chat.start extension, and have the agent run commands using subprocess.run with shell=True on the host. This exploitation can lead to unauthorized access to other tenants' data and server secrets.

It is recommended to route the Copilot 'standard' agent through a Docker sandbox to isolate it before execution. If a host backend must be used, exclude the execute tool for chat agents and apply command validation checks. Additionally, avoid executing commands with 'shell=True' to prevent shell metacharacters from being interpreted.