Количество 3
Количество 3
CVE-2026-31996
OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem operations through sort output flags or recursive grep flags. Attackers with command execution access can leverage sort -o flag for arbitrary file writes or grep -R flag for recursive file reads, circumventing intended stdin-only restrictions.
GHSA-4685-c5cp-vp95
OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags
BDU:2026-05007
Уязвимость конфигурации tools.exec.safeBins ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), позволяющая нарушителю выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-31996 OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem operations through sort output flags or recursive grep flags. Attackers with command execution access can leverage sort -o flag for arbitrary file writes or grep -R flag for recursive file reads, circumventing intended stdin-only restrictions. | CVSS3: 4.4 | 0% Низкий | 5 месяцев назад |
| GHSA-4685-c5cp-vp95 OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags | CVSS3: 3.6 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-05007 Уязвимость конфигурации tools.exec.safeBins ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), позволяющая нарушителю выполнить произвольные команды | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу