Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/02 10:40 p.m.11 views

OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows

Summary In approval-enabled host=node workflows, system.run approvals did not always carry a strict, versioned execution-context binding. In uncommon setups that rely on these approvals as an integrity guardrail, a previously approved request could be reused with changed env input. Affected...

6.5CVSS6AI score0.00191EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder