Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-47211

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code execution and potential system takeover. The vulnerability stems from Ouroboros loading the .env file from the current working directory. Execution-affecting environment variables such as OUROBOROS_CLI_PATH, OP
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:83df1bff9320757c3b35afd3ced4046ea7dfd8ea5c6198237488eeef3c67c6b4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"ouroboros","vendor":"Q00","versions":[{"status":"affected","version":"< 0.39.0"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2a0fb524c5eaa04b52381c3c100b5efb8287cdef6d6d246a1cbdcb01c8e7103d · sha256:a8445d975f5d0c0a… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.4,"baseSeverity":"HIGH","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:2a0fb524c5eaa04b52381c3c100b5efb8287cdef6d6d246a1cbdcb01c8e7103d · sha256:a8445d975f5d0c0a… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-426","description":"CWE-426: Untrusted Search Path","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:2a0fb524c5eaa04b52381c3c100b5efb8287cdef6d6d246a1cbdcb01c8e7103d · sha256:a8445d975f5d0c0a… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"name":"https://github.com/Q00/ouroboros/commit/4e70b760b4eb157469b58645339ba831f6513d37","tags":["x_refsource_MISC"],"url":"https://github.com/Q00/ouroboros/commit/4e70b760b4eb157469b58645339ba831f6513d37"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2a0fb524c5eaa04b52381c3c100b5efb8287cdef6d6d246a1cbdcb01c8e7103d · sha256:a8445d975f5d0c0a… · /containers/cna/references/2
{"name":"https://github.com/Q00/ouroboros/pull/1078","tags":["x_refsource_MISC"],"url":"https://github.com/Q00/ouroboros/pull/1078"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2a0fb524c5eaa04b52381c3c100b5efb8287cdef6d6d246a1cbdcb01c8e7103d · sha256:a8445d975f5d0c0a… · /containers/cna/references/1
{"name":"https://github.com/Q00/ouroboros/security/advisories/GHSA-c4m7-2gwp-vw76","tags":["x_refsource_CONFIRM"],"url":"https://github.com/Q00/ouroboros/security/advisories/GHSA-c4m7-2gwp-vw76"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2a0fb524c5eaa04b52381c3c100b5efb8287cdef6d6d246a1cbdcb01c8e7103d · sha256:a8445d975f5d0c0a… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer