4 matches found
OpenClaw: Exec approval display truncation could hide the command being approved
Summary OpenClaw exec approvals could show a shortened command in the approval UI while keeping the full original command for execution. For very long commands, an approver could see and approve a benign-looking prefix while a hidden suffix remained part of the command that would run after...
CVE-2026-53829
OpenClaw prior to 2026.5.18 is affected by an approval display truncation vulnerability. Authenticated users can hide command suffixes from approvers by submitting oversized exec commands with benign prefixes and malicious suffixes, potentially enabling unauthorized operations after approval. CVS...
FreeBSD : kde-runtime -- kdesu: displayed command truncated by unicode string terminator (41fe4724-06a2-11e7-8e3e-5453ed2e2b49)
Albert Aastals Cid reports : A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...