Evidence · DiggingBeagle record
OpenSRE CVE-2026-109444 approval-path analysis
- Source role
- primary disclosure
Evidence record
Claim-level citations (1)
- supportsOpenSRE alert text can reach a shell tool that never requests approval: The OpenSRE advisory reports that shell_run and cli_exec inherit requires_approval=False, while the headless presenter also automatically permits execution and discards the confirmation callback.
Root Cause; tool contracts, shell actions and headless subprocess presenter