Evidence · DiggingBeagle record
JoySafeter CVE-2026-109443 standard-mode advisory
- Source role
- primary disclosure
Evidence record
Claim-level citations (1)
- supportsJoySafeter client-selected Copilot mode reaches an unsandboxed host shell: The JoySafeter advisory reports that an authenticated tenant can select standard Copilot mode, whose backend automatically supplies an execute tool running shell=True on the server host.
Root Cause; FilesystemSandboxBackend, FilesystemMiddleware and _get_copilot_stream