CVE-2026-109443
Description
A flaw was found in JoySafeter. This vulnerability allows an authenticated remote attacker to achieve arbitrary code execution by leveraging an unsandboxed command execution tool within the Copilot feature. By initiating a standard mode session through the chat interface, an attacker can trigger the underlying system to execute arbitrary operating system commands directly on the host, potentially exposing sensitive tenant data and server secrets.
Statement
Red Hat Product Security rates this vulnerability as Important rather than Critical because exploitation requires valid authentication credentials before an attacker can invoke the command execution interface. While the flaw allows authenticated users to gain arbitrary command execution on the host, JoySafeter is neither packaged nor distributed in Red Hat Enterprise Linux or any Red Hat product portfolio. As a result, standard Red Hat enterprise environments do not ship or expose this component.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Non-Repudiation
Technical Impact: Execute Unauthorized Code or Commands; DoS: Crash, Exit, or Restart; Read Files or Directories; Modify Files or Directories; Read Application Data; Modify Application Data; Hide Activities
Attackers could execute unauthorized operating system commands, which could then be used to disable the product, or read and modify data for which the attacker does not have permissions to access directly. Since the targeted application is directly executing the commands instead of the attacker, any malicious activities may appear to come from the application or the application's owner.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
