CVE-2026-77474: destructive_command_guard (dcg)
The National Vulnerability Database (NVD) records that before 0.6.6 destructive_command_guard, a command-line safety tool that blocks destructive shell commands before AI coding agents run them, can be driven into exponential-time rescanning by nested or unclosed $( or $(( sequences, and the hung PreToolUse hook fails open so the destructive command proceeds; fixed in 0.6.6.
The record
- Kind
- Vulnerability
- Source record
- CVE-2026-77474: destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI (National Vulnerability Database record)
- Record published
- 2026-10-16
- Posted here
- 2026-10-19
- World
- Software agents · Enterprise work agents
- Controls concerned
- Destructive-action gate C-E3; Halt and hand off on uncertainty or refusal C-D2
- Checked
- Checked against its record on 2026-10-22 by a reader who did not draft it; report
verification/reports/SIG-2026-10-19-006-2026-10-22.md.
A signal's controls are the ones its record points at, the exposure; a case's controls are the ones its records show were absent or failed, so the two can differ.
Corrections
Changes to what this signal says, with the reason. Every earlier version is kept.
- 2026-10-22: Summary. Plain-language rule: abbreviation spelled out; no claim changed (CVE record CVE-2026-77474). Found by the independent reader of 22 October 2026.
Show the change
Before: NVD records that before 0.6.6 destructive_command_guard, a command-line safety tool that blocks destructive shell commands before AI coding agents run them, can be driven into exponential-time rescanning by nested or unclosed $( or $(( sequences, and the hung PreToolUse hook fails open so the destructive command proceeds; fixed in 0.6.6.After: The National Vulnerability Database (NVD) records that before 0.6.6 destructive_command_guard, a command-line safety tool that blocks destructive shell commands before AI coding agents run them, can be driven into exponential-time rescanning by nested or unclosed $( or $(( sequences, and the hung PreToolUse hook fails open so the destructive command proceeds; fixed in 0.6.6. - 2026-10-22: Summary. Found in an independent read against the record on 22 October 2026: the record calls destructive_command_guard a command-line safety tool, not a hook (CVE record CVE-2026-77474).
Show the change
Before: NVD records that before 0.6.6 destructive_command_guard, a hook that blocks destructive shell commands before AI coding agents run them, can be driven into exponential-time rescanning by nested or unclosed $( or $(( sequences, and the hung PreToolUse hook fails open so the destructive command proceeds; fixed in 0.6.6.After: NVD records that before 0.6.6 destructive_command_guard, a command-line safety tool that blocks destructive shell commands before AI coding agents run them, can be driven into exponential-time rescanning by nested or unclosed $( or $(( sequences, and the hung PreToolUse hook fails open so the destructive command proceeds; fixed in 0.6.6.
What a signal is. A signal records what a primary record says; it assigns no fault. It is lighter than a case: one dated item from one record, tagged with the world, sector and controls it touches. It becomes a case when it meets the bar for one.
New signals like this, once a week. A short email when a case, signal or rule touches software agents. Free; unsubscribe in one click.
Get the weekly emailNewer: NIST, NSA and CISA: Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation (October 2026)
Older: CVE-2026-96620: Claude Agent SDK