2 matches found
EUVD-2026-13281
OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowlist mode that allows local attackers to execute unauthorized binaries by exploiting basename-only allowlist entries. Attackers can execute same-name local binaries ./echo withou...
7.3CVSS5.9AI score0.00167EPSS
SaveExploits0References3
CVE-2026-32016: Untrusted Search Path
OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval allowlist mode that allows local attackers to execute unauthorized binaries by exploiting basename-only allowlist entries. Attackers can execute same-name local binaries ./echo withou...
7.8CVSS6.1AI score0.00167EPSS
SaveExploits0References1
20