Joysafeter
Monthly
Authenticated remote code execution in JoySafeter through 1.0.0 allows any self-registered low-privilege user to run host operating-system commands by selecting Copilot standard mode and invoking its unsandboxed execute tool over the WebSocket chat.start extension. Successful exploitation can expose other tenants' data and server secrets because the agent calls subprocess.run with shell=True outside a sandbox, and publicly available exploit code exists. The assessed CVSS 3.1 vector requires only PR:L with no user interaction, so internet-facing deployments that allow open registration are directly exposed and warrant operational priority.
Authenticated remote code execution in JoySafeter through 1.0.0 allows any self-registered low-privilege user to run host operating-system commands by selecting Copilot standard mode and invoking its unsandboxed execute tool over the WebSocket chat.start extension. Successful exploitation can expose other tenants' data and server secrets because the agent calls subprocess.run with shell=True outside a sandbox, and publicly available exploit code exists. The assessed CVSS 3.1 vector requires only PR:L with no user interaction, so internet-facing deployments that allow open registration are directly exposed and warrant operational priority.