Dragonmonk111

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Dragonmonk111 records in CISA KEV

No Dragonmonk111 vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-32035 CVE-2026-43992

JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter

MEDIUM 48

JunoClaw is an agentic AI platform built on Juno Network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00225 Published 2026-05-12 Fixed in v0.x.y-security-1 CWE-200

TI-2026-32034 CVE-2026-43991

JunoClaw: plugin-shell shell-injection bypass via substring blocklist

LOW 38

JunoClaw is an agentic AI platform built on Juno Network.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00171 Published 2026-05-12 Fixed in v0.x.y-security-1 CWE-184

TI-2026-32033 CVE-2026-43990

JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper

LOW 37

JunoClaw is an agentic AI platform built on Juno Network.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00151 Published 2026-05-12 Fixed in v0.x.y-security-1 CWE-77

TI-2026-32032 CVE-2026-43989

JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation

LOW 36

JunoClaw is an agentic AI platform built on Juno Network.

CVSS 3.1HIGH 8.5 Local No auth User interaction EPSS 0.00147 Published 2026-05-12 Fixed in v0.x.y-security-1 CWE-20

TI-2026-32036 CVE-2026-43993

JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access

LOW 35

JunoClaw is an agentic AI platform built on Juno Network.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.0023 Published 2026-05-12 Fixed in v0.x.y-security-1 CWE-918

Open these records in search →