PT-2026-26398 · Openclaw · Openclaw
Redgrave961
+1
·
Publicado
2026-03-03
·
Atualizado
2026-03-20
·
CVE-2026-32017
CVSS v3.1
7.1
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.2.19
Description
OpenClaw’s
exec allowlist/safeBins policy can be bypassed with attached short-option payloads, such as sort -o/tmp/poc, enabling file-write operations while still satisfying safeBins checks. This bypass occurs due to insufficient argument validation when using short options with whitelisted binaries. Attackers can leverage this to perform unauthorized file-write operations that should be denied by the safeBins checks. The vulnerable component is the exec function, and the issue involves bypassing the safeBins policy. The vulnerable parameter is the command-line arguments passed to the whitelisted binaries.Recommendations
OpenClaw versions prior to 2026.2.19 should be updated to version 2026.2.19 or later.
Correção
Incomplete List of Disallowed Inputs
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openclaw