Lucene search
+L

3 matches found

CNVD
CNVD
added 2026/04/08 12:00 a.m.8 views

OpenClaw Authorization Problem Vulnerability (CNVD-2026-16621)

OpenClaw is a command line tool for rights management. A security vulnerability exists in versions of OpenClaw prior to 2026.3.11, which stems from the failure of the system.run approval function to properly bind variable file operands for specific script runners such as tsx, jiti, and others. An...

9.4CVSS5.8AI score0.00179EPSS
SaveExploits0
NVD
NVD
added 2026/03/29 1:17 p.m.11 views

CVE-2026-32978

OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti. Attackers can obtain approval for benign script commands, rewrite referenced scripts on disk, and execute modified cod...

9.4CVSS0.00179EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/29 12:44 p.m.4 views

CVE-2026-32978

OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti. Attackers can obtain approval for benign script commands, rewrite referenced scripts on disk, and execute modified cod...

9.4CVSS6AI score0.00179EPSS
SaveExploits0References3
Rows per page
Query Builder