PT-2026-110108 · Undefined · Undefined
CVE-2026-104247
·
Published
2026-10-11
·
Updated
2026-10-11
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
VTCode auto-approved find after three yeses, then -exe$''c slipped past the -exec block (CVE-2026-104247, CVSS 6.3). Family learning plus exact-token denylists is a parser gap the shell wins. Fixed in 0.171.5.
If your coding agent banks command approvals, which flags still get a free pass after the binary clears?
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined