CVE-2026-18980

Affected software: nearai ironclaw (up to 0.29.1). Vulnerable component: function classify_command_risk in src/tools/builtin/shell.rs. Root cause: command injection due to manipulation of input handling. Impact: remote attack possibility; exploitation is publicly available (exploit maturity: PROO...