{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/joysafeter/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:joysafeter:joysafeter:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-109443"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["JoySafeter (\u003c= 1.0.0)"],"_cs_severities":["high"],"_cs_tags":["remote-code-execution","cloud-security","vulnerability"],"_cs_type":"advisory","_cs_vendors":["JoySafeter"],"content_html":"\u003cp\u003eJoySafeter versions 1.0.0 and earlier contain a critical remote code execution (RCE) vulnerability that allows authenticated users to execute arbitrary operating system commands. The vulnerability stems from an unsandboxed 'execute' tool within the platform's Copilot standard mode. Attackers can exploit this by self-registering for an account and initiating a WebSocket connection through the 'chat.start' extension. By selecting 'standard mode' during the chat initiation, the attacker influences the agent to invoke the 'subprocess.run' function with the 'shell=True' parameter. This direct execution on the host server enables unauthorized access to sensitive server secrets and data belonging to other tenants. This vulnerability poses a significant risk to multi-tenant environments where server-side agent execution is exposed without adequate sandboxing.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker performs self-registration to create a valid user account on the target JoySafeter instance.\u003c/li\u003e\n\u003cli\u003eAttacker initiates a WebSocket connection to the platform's chat interface.\u003c/li\u003e\n\u003cli\u003eAttacker sends a request to the 'chat.start' extension to initialize a new session.\u003c/li\u003e\n\u003cli\u003eAttacker specifies 'standard mode' in the session configuration to leverage the vulnerable agent tool path.\u003c/li\u003e\n\u003cli\u003eAttacker provides input via the chat interface that is processed by the unsandboxed execute tool.\u003c/li\u003e\n\u003cli\u003eThe agent backend receives the input and invokes 'subprocess.run' with 'shell=True' on the host operating system.\u003c/li\u003e\n\u003cli\u003eAttacker executes arbitrary OS commands with the privileges of the JoySafeter backend process.\u003c/li\u003e\n\u003cli\u003eAttacker exfiltrates server secrets or crosses tenant boundaries to access restricted data.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for full remote code execution on the host server. This leads to complete loss of confidentiality and integrity, as attackers can access server secrets and data across multiple tenants. The vulnerability has a CVSS v3.1 base score of 8.8, reflecting the high potential for compromise in SaaS or multi-tenant deployments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade JoySafeter to a version greater than 1.0.0 once a patch is available from the vendor.\u003c/li\u003e\n\u003cli\u003eReview and restrict permissions for the 'chat.start' extension to prevent unprivileged users from accessing 'standard mode' or the 'execute' tool.\u003c/li\u003e\n\u003cli\u003eMonitor backend logs for unauthorized invocations of 'subprocess.run' or shell spawning commands originating from the JoySafeter application process.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation to isolate the JoySafeter application server from internal secrets management services.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T02:31:55Z","date_published":"2026-10-20T02:31:55Z","id":"https://feed.craftedsignal.io/briefs/2026-10-joysafeter-rce/","summary":"JoySafeter version 1.0.0 and earlier contains a remote code execution vulnerability allowing authenticated users to execute shell commands via an unsandboxed agent tool.","title":"Remote Code Execution in JoySafeter via Unsandboxed Execute Tool","url":"https://feed.craftedsignal.io/briefs/2026-10-joysafeter-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - JoySafeter","version":"https://jsonfeed.org/version/1.1"}