Vendor
OpenSRE versions through 0.1.2026.10.19 are vulnerable to an approval gate bypass that enables arbitrary command execution via manipulated alert or messaging inputs.