CVE-2026-47211

Description

ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env

Overview

State

—

Assigner (CNA)

—

CVSS severity

critical

CVSS score

9.8 / 10

CVSS vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Effective score

9.8 / 10 CRITICAL source: CNA overview

CWE(s)

—

Reserved

—

Published

—

Last updated

—

Source

https://www.tenable.com/cve/CVE-2026-47211

Linked Threat

CVE-2026-47211 — CVE-2026-47211

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2026-52425

Assigner

GitHub_M

Published

Aug 3, 2026, 8:01:03 PM

Updated

Aug 3, 2026, 9:19:05 PM

EUVD base score (CVSS 4.0)

8.4 / 10
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EUVD-reported EPSS

0.0000

Vendors

Q00

Products

ouroboros (< 0.39.0)

Aliases

GHSA-c4m7-2gwp-vw76, PYSEC-2026-2857

ENISA description: Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code execution and potential system takeover. The vulnerability stems from Ouroboros loading the .env file from the current working directory. Execution-affecting environment variables such as OUROBOROS_CLI_PATH, OPENCODE_CLI_PATH, and other backend selectors are accepted directly from this local .env. An attacker can include a malicious script in the repository and point the CLI path variable to it (e.g., OUROBOROS_CLI_PATH=./malicious_script.sh). When the user executes a command like ouroboros init or any command that instantiates the adapter, the malicious script is executed instead of the intended CLI. This issue has been fixed in version 0.39.0.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (2)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://nvd.nist.gov/vuln/detail/CVE-2026-47211 tenable:nvd.nist.gov
• https://www.cve.org/CVERecord?id=CVE-2026-47211 tenable:www.cve.org

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

• Windows 11, version 25H2 known issues and notifications
  web:learn.microsoft.com

  Windows 11, version 25H2 is now available for all eligible devices. Devices running Home and Pro editions of Windows 11 that are not managed by IT departments will receive the update to Windows 11, version 25H2 through the machine learning-based intelligent rollout.

  2026-06-19 02:30 UTC
• Security Update Guide - Loading - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-06-19 02:30 UTC
• Microsoft February 2026 Patch Tuesday fixes 6 zero-days, 58 flaws
  web:www.bleepingcomputer.com

  Today is Microsoft's February 2026 Patch Tuesday with security updates for 58 flaws, including 6 actively exploited and three publicly disclosed zero-day vulnerabilities.

  2026-06-19 02:30 UTC
• February's Patch Tuesday release fixes 59 flaws ... - Computerworld
  web:www.computerworld.com

  Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...

  2026-06-19 02:30 UTC
• Microsoft is working on a patch for 'YellowKey ... - Computerworld
  web:www.computerworld.com

  Microsoft says it is considering a patch for a zero-day vulnerability, dubbed YellowKey, that allows attackers with access to a Windows device to bypass Bitlocker encryption protection and read ...

  2026-06-19 02:30 UTC
• February 2026 Patch Tuesday: Updates and Analysis | CrowdStrike
  web:www.crowdstrike.com

  Microsoft's February 2026 Patch Tuesday addresses 59 CVEs , featuring six exploited vulnerabilities, three of which were publicly known, and five Critical vulnerabilities.

  2026-06-19 02:30 UTC
• Microsoft fixes six zero-days on February 2026 Patch Tuesday
  web:www.csoonline.com

  Microsoft highlighted six new and actively exploited vulnerabilities among the 60 fixes issued in today's February Patch Tuesday releases.

  2026-06-19 02:30 UTC
• Windows 11 February 2026 Patch: KB5077181 and KB5075941 fix zero-days ...
  web:www.notebookcheck.net

  Microsoft's February 2026 Windows 11 updates (KB5077181 and KB5075941) add security patches, bug fixes, and new Secure Boot rollout signals ahead of certificate expirations starting in June 2026 .

  2026-06-19 02:30 UTC
• Patch Tuesday - June 2026 - Rapid7
  web:www.rapid7.com

  Microsoft is publishing 200 vulnerabilities on June 2026 Patch Tuesday, including an HTTP/2 denial of service vulnerability and an elevation of privilege vulnerability in PowerToys.

  2026-06-19 02:30 UTC
• Patch Tuesday June 2026: Security Updates & CVE Analysis
  web:zecurit.com

  Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

  2026-06-19 02:30 UTC

Only Available for Registered Users. Sign in to view.