Описание
OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.
Ссылки
- Patch
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2026.2.22 (исключая)
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 21%
0.00286
Низкий
6.3 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 8.8
github
7 месяцев назад
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program
EPSS
Процентиль: 21%
0.00286
Низкий
6.3 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-78