9.8Crítica
OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection
Tracer-Cloud opensre
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions …