CVE-2026-18980 nearai ironclaw shell.rs classify_command_risk command injection

A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classifycommandrisk of the file src/tools/builtin/shell.rs. Such manipulation leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The name of...

CVE-2026-18980 nearai ironclaw shell.rs classify_command_risk command injection

A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classifycommandrisk of the file src/tools/builtin/shell.rs. Such manipulation leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The name of...

PT-2026-68369

Name of the Vulnerable Software and Affected Versions nearai ironclaw versions prior to 0.29.2 Description A remote command injection issue exists within the classify command risk function located in the src/tools/builtin/shell.rs file. This flaw allows a remote attacker to execute arbitrary...