CVE-2026-32052

OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading approval text while executing arbitrary...

vantuz (>=3.3.2, <=3.3.7) potentially affected by CVE-2026-32052 via openclaw (0.0.1)

openclaw NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-32052 Source advisory: MEND:CVE-2026-32052...