Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/19 10:06 p.m.31 views

CVE-2026-32010 OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist...

6.3CVSS0.00286EPSS
SaveExploits0References3
Rows per page
Query Builder