PT-2026-34786

CVE-2026-41355

Published

2026-04-07

Updated

2026-05-12

Description by

CVSS 3.1

7.3

High

MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenShell versions prior to 2026.3.28

Description An arbitrary code execution issue exists in mirror mode, which allows untrusted sandbox files to be converted into workspace hooks. Attackers with mirror mode access can execute arbitrary code on the host system during gateway startup by exploiting enabled workspace hooks.

Recommendations Update to version 2026.3.28.

Exploitability

Exploit

Fix

Researchers

Tdjackey

Vendors

Affected products

Weakness enumeration

CWE-829: Inclusion of Functionality from Untrusted Control Sphere

Related identifiers

CVE-2026-41355