https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:46:44 +0000 https://db.gcve.eu/vuln/cve-2026-53831 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.</p> https://db.gcve.eu/vuln/cve-2026-53831 https://db.gcve.eu/vuln/ghsa-mhq8-78pj-5j79 <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>On POSIX nodes, OpenClaw&#39;s `system.run` safe-bin checks could approve a command before shell expansion changed how the command was interpreted. A value that appeared to be a safe-bin argument could expand into additional shell words and become a file operand.</p> <p>This issue is limited to paired POSIX node execution through `system.run` with safe-bin or allowlist-style auto-approval. It is not an unauthenticated node takeover.</p> <p>### Affected configurations</p> <p>This affects deployments where:</p> <p>- a POSIX node is paired to the gateway - `system.run` is reachable by an authenticated operator or agent flow - exec policy uses safe-bin or allowlist-based auto-approval - the approved command contains shell-expanded values that can change argv shape</p> <p>### Impact</p> <p>A lower-privilege operator flow could cause an approved safe-bin command to read a node-local file that was not intended by the policy. Depending on the local files available to the node process, this could expose OpenClaw configuration data or other node-local information.</p> <p>The issue is a policy-enforcement gap in argv validation, not a general statement that every safe-bin command is unsafe.</p> <p>### Patched Versions</p> <p>The first stable patched version is `2026.5.18`.</p> <p>### Mitigations</p> <p>Upgrade to `openclaw@2026.5.18` or later. Before upgrading, avoid broad safe-bin auto-approval for commands that can read arbitrary paths, and prefer explicit approval for node commands that touch local files.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>On POSIX nodes, OpenClaw&#39;s `system.run` safe-bin checks could approve a command before shell expansion changed how the command was interpreted. A value that appeared to be a safe-bin argument could expand into additional shell words and become a file operand.</p> <p>This issue is limited to paired POSIX node execution through `system.run` with safe-bin or allowlist-style auto-approval. It is not an unauthenticated node takeover.</p> <p>### Affected configurations</p> <p>This affects deployments where:</p> <p>- a POSIX node is paired to the gateway - `system.run` is reachable by an authenticated operator or agent flow - exec policy uses safe-bin or allowlist-based auto-approval - the approved command contains shell-expanded values that can change argv shape</p> <p>### Impact</p> <p>A lower-privilege operator flow could cause an approved safe-bin command to read a node-local file that was not intended by the policy. Depending on the local files available to the node process, this could expose OpenClaw configuration data or other node-local information.</p> <p>The issue is a policy-enforcement gap in argv validation, not a general statement that every safe-bin command is unsafe.</p> <p>### Patched Versions</p> <p>The first stable patched version is `2026.5.18`.</p> <p>### Mitigations</p> <p>Upgrade to `openclaw@2026.5.18` or later. Before upgrading, avoid broad safe-bin auto-approval for commands that can read arbitrary paths, and prefer explicit approval for node commands that touch local files.</p> https://db.gcve.eu/vuln/ghsa-mhq8-78pj-5j79