https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:20:56 +0000 https://db.gcve.eu/vuln/cve-2026-31993 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app that allows authenticated operators to bypass exec approval checks. Attackers with operator.write privileges and a paired macOS beta node can craft shell-chain payloads that pass incomplete allowlist validation and execute arbitrary commands on the paired host.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app that allows authenticated operators to bypass exec approval checks. Attackers with operator.write privileges and a paired macOS beta node can craft shell-chain payloads that pass incomplete allowlist validation and execute arbitrary commands on the paired host.</p> https://db.gcve.eu/vuln/cve-2026-31993 https://db.gcve.eu/vuln/ghsa-5f9p-f3w2-fwch <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary In the macOS companion app (**currently beta**), a parsing mismatch in exec approvals could let shell-chain payloads pass allowlist checks in `system.run` under specific settings.</p> <p>### Impact This path requires all of the following: - authenticated caller with `operator.write` - paired macOS beta node host - exec approvals set to `security=allowlist` and `ask=on-miss`</p> <p>Under those conditions, a shell-chain command could be approved from an incomplete command view and then executed on the paired macOS host.</p> <p>### Default Install Status Default installs are not affected.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Affected: `&lt;= 2026.2.21-2` - Patched (planned next release): `&gt;= 2026.2.22`</p> <p>### Technical Details The fix hardens macOS allowlist resolution by evaluating shell chains per segment and failing closed on unsafe shell-substitution parsing in allowlist mode.</p> <p>### Product Status Note The affected macOS companion app path is currently in beta.</p> <p>### Fix Commit(s) - `5da03e622119fa012285cdb590fcf4264c965cb5` - `e371da38aab99521c4e076cd3d95fd775e00b784`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next npm release (`2026.2.22`) so once that version is published, this advisory can be published without additional metadata edits.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary In the macOS companion app (**currently beta**), a parsing mismatch in exec approvals could let shell-chain payloads pass allowlist checks in `system.run` under specific settings.</p> <p>### Impact This path requires all of the following: - authenticated caller with `operator.write` - paired macOS beta node host - exec approvals set to `security=allowlist` and `ask=on-miss`</p> <p>Under those conditions, a shell-chain command could be approved from an incomplete command view and then executed on the paired macOS host.</p> <p>### Default Install Status Default installs are not affected.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Affected: `&lt;= 2026.2.21-2` - Patched (planned next release): `&gt;= 2026.2.22`</p> <p>### Technical Details The fix hardens macOS allowlist resolution by evaluating shell chains per segment and failing closed on unsafe shell-substitution parsing in allowlist mode.</p> <p>### Product Status Note The affected macOS companion app path is currently in beta.</p> <p>### Fix Commit(s) - `5da03e622119fa012285cdb590fcf4264c965cb5` - `e371da38aab99521c4e076cd3d95fd775e00b784`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next npm release (`2026.2.22`) so once that version is published, this advisory can be published without additional metadata edits.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> https://db.gcve.eu/vuln/ghsa-5f9p-f3w2-fwch