Skip to content
OpenAdvisories

Vendor

Tracer-Cloud

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection

    OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions …