CVE-2026-32973

creationtimestamp| type| source ---|---|--- 2026-03-29 13:33:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7b5u6y462p 2026-03-29 14:03:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7ctg36y627 2026-03-29 15:20:09+00:00| seen|...

CVE-2026-32973 OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalization

OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POSIX paths. Attackers can exploit the ? wildcard matching across path segments to execute commands or...