JoySafeter: Authenticated remote code execution via Copilot standard mode
Summary
JoySafeter through version 1.0.0 allows authenticated users to run operating system commands on the host. The flaw is in the Copilot standard mode, where an execute tool runs commands through a shell without a sandbox. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and reach other tenants' data and server secrets.
Affected
- jd-opensource JoySafeter, versions 0 through 1.0.0
- Default configuration is not affected; the vulnerable path requires standard mode to be selected
Fixed in
Unknown. No fixed version or vendor patch was identified at the time of writing.
Workaround
- Disable Copilot standard mode for all users, or restrict it to trusted accounts.
- Disable or restrict self-registration.
- Run the service with minimal privileges and limit its access to secrets, other tenants' data and the network.
Exploitation
- Known exploitation: none reported.
- Public PoC: not identified. Lasso reproduced the issue locally using benign test markers.
- CISA SSVC: exploitation status PoC, automatable no, technical impact total.
Our recommendation
- Check whether JoySafeter is deployed and which version is running.
- Disable self-registration and disable or restrict Copilot standard mode now.
- Review existing accounts, logs and shell activity for suspicious use.
- Rotate server secrets and API keys if exposure is possible.
- Ask the vendor for a fix timeline and monitor the repository for a patch and public PoC.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulnCheck advisory: JoySafeter Authenticated RCE via Copilot Standard Mode Shell www.vulncheck.com
- Lasso Security vulnerability database: CVE-2026-109443 www.lasso.security
- GitHub: command_executor.py (commit 12234a1) github.com
- GitHub: copilot_service.py (commit 12234a1) github.com
- VulDB: CVE-2026-109443 vuldb.com
- OpenCVE: CVE-2026-109443 app.opencve.io
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 01:40.
Original description (NVD)
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the agent invoke subprocess.run with shell=True on the host to access other tenants' data and server secrets.
NVD references (4)
- https://github.com/jd-opensource/JoySafeter/blob/12234a11a9d96acef85577afb1fa5682169d6171/backend/app/core/ag…
- https://github.com/jd-opensource/JoySafeter/blob/12234a11a9d96acef85577afb1fa5682169d6171/backend/app/service…
- https://www.lasso.security/vulnerability-database/cve-2026-109443
- https://www.vulncheck.com/advisories/joysafeter-through-1.0.0-authenticated-rce-via-copilot-standard-mode-she…
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.