TI-2026-32034 Aliases CVE-2026-43991

JunoClaw: plugin-shell shell-injection bypass via substring blocklist

LOW 38CWE-184Published 2026-05-12 · Updated 2026-05-13

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00171 6th percentileScored 2026-11-07

Fix Fixed junoclaw (Dragonmonk111): v0.x.y-security-1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dragonmonk111	junoclaw	before v0.x.y-security-1	v0.x.y-security-1	Patch available	CNA

junoclaw VendorDragonmonk111 Affected before v0.x.y-security-1 Fixed in v0.x.y-security-1 Patch available CNA

Remediation

Fix · CNA junoclaw (Dragonmonk111) Fixed in v0.x.y-security-1

Timeline

2026-10-02 Threatist record created from CVE-2026-43991

References

Other 2

TI-2026-32035 JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter CVSS 3.1CRITICAL 9.8
TI-2026-32033 JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper CVSS 3.1HIGH 8.4
TI-2026-32032 JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation CVSS 3.1HIGH 8.5
TI-2026-32036 JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access CVSS 3.1HIGH 8.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences