Read the docs
TI-2026-32035 Aliases CVE-2026-43992

JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter

Priority MEDIUM 48CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_transfer, etc.) accepted 'mnemonic: string' as an explicit tool-call parameter. The BIP-39 seed was consequently embedded in the LLM tool-call JSON, exposing it to any transport, log, or telemetry surface in the path between the LLM provider and the MCP process. This vulnerability is fixed in 0.x.y-security-1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00225 13th percentileScored 2026-11-07
Fix Fixed junoclaw (Dragonmonk111): v0.x.y-security-1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Dragonmonk111junoclawbefore v0.x.y-security-1v0.x.y-security-1Patch availableCNA
  • junoclaw VendorDragonmonk111 Affected before v0.x.y-security-1 Fixed in v0.x.y-security-1 Patch available CNA

Remediation

  • Fix · CNA junoclaw (Dragonmonk111) Fixed in v0.x.y-security-1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-43992

References

Other 3

  • TI-2026-32034 JunoClaw: plugin-shell shell-injection bypass via substring blocklist CVSS 3.1HIGH 8.4
  • TI-2026-32033 JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper CVSS 3.1HIGH 8.4
  • TI-2026-32032 JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation CVSS 3.1HIGH 8.5
  • TI-2026-32036 JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access CVSS 3.1HIGH 8.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences