CVE-2026-109443: JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the agent invoke subprocess.run with shell=True on the host to access other tenants' data and server secrets.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any user who can self-register can exploit it. The attacker needs an authenticated account and can select Copilot standard mode through the WebSocket chat.start extension.
Are default deployments affected?
The issue is exposed through Copilot standard mode, where the execute tool is unsandboxed. The provided information does not establish whether that mode is enabled or selectable by default.
What is the likely impact after exploitation?
An attacker can cause the agent to invoke operating-system commands on the host through subprocess.run with shell=True. This can expose other tenants' data and server secrets, and the reported impact includes confidentiality, integrity, and availability compromise.