PT-2026-26003 · Openclaw · Openclaw

Tdjackey · CVE-2026-22169 · Publicado 2026-02-21 · Atualizado 2026-03-19

Positive Technologies (AI Summary)

CVSS v4.0

7.1

Alta

Vetor base

AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.22

Description OpenClaw contains an allowlist bypass issue in the safeBins configuration. This allows attackers to invoke external helpers through the compress-program option. Specifically, when sort is explicitly added to tools.exec.safeBins, remote attackers can bypass intended safe-bin approval constraints by leveraging the compress-program parameter to execute unauthorized external programs. The vulnerable component is the safeBins configuration and the vulnerable parameter is compress-program. The vulnerable function is not explicitly mentioned.

Recommendations Update OpenClaw to version 2026.2.22 or later.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-15

CWE-78

Identificadores relacionados

BDU:2026-05049

CVE-2026-22169

GHSA-VMQR-RC7X-3446

Produtos afetados

Openclaw

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22169.json · Exploit
• https://github.com/openclaw/openclaw · Nota
• https://github.com/openclaw/openclaw/security/advisories/GHSA-vmqr-rc7x-3446 · Aviso do Fabricante
• https://github.com/openclaw/openclaw/commit/57fbbaebca4d34d17549accf6092ae26eb7b605c · Correção
• https://twitter.com/VulmonFeeds/status/2034160647890473211 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22169 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-22169 · Aviso do Fabricante
• https://vulncheck.com/advisories/openclaw-allowlist-bypass-via-sort-configuration-in-safebins · Nota
• https://twitter.com/CVEnew/status/2034136435079495980 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2034543843522306102 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-05049 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-vmqr-rc7x-3446 · Aviso do Fabricante