Tracking: CVE-2026-109443
Severity: High
Who is affected
JoySafeter through 1.0.0. An attacker needs a user account; deployments that permit self-registration may make that prerequisite easy to satisfy.
How the attack works
A user can select Copilot standard mode through the WebSocket chat.start message. In that mode, the execution path runs subprocess.run(..., shell=True) directly on the host instead of inside the expected sandbox.
The result is command execution as the backend service account. In a shared deployment, that account may also reach other tenants' data and server-side secrets. Authentication alone does not prevent this boundary failure.
What to do
- Disable or restrict the affected standard-mode execution path until a vendor-confirmed fix is available.
- Review account registration and who can invoke Copilot. Isolate the backend from tenant data and credentials it does not need.
- Investigate unexpected backend child processes and cross-tenant access. Rotate accessible secrets if logs or other evidence indicate compromise.
Scope and limits
The reviewed CVE record does not identify a fixed release. Do not present a version upgrade as a confirmed remedy without vendor guidance.