https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:54:04 +0000 https://vulnerability.circl.lu/vuln/cve-2026-26325 <p><strong>Affected:</strong> openclaw</p> <p>OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. This only impacts deployments that use the node host / companion node execution path (`system.run` on a node), enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`), allow an attacker to invoke `system.run`. Default/non-node configurations are not affected. Version 2026.2.14 enforces `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).</p> <p><strong>Affected:</strong> openclaw</p> <p>OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. This only impacts deployments that use the node host / companion node execution path (`system.run` on a node), enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`), allow an attacker to invoke `system.run`. Default/non-node configurations are not affected. Version 2026.2.14 enforces `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).</p> https://vulnerability.circl.lu/vuln/cve-2026-26325 https://vulnerability.circl.lu/vuln/ghsa-h3f9-mjwj-w476 <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary</p> <p>A mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv.</p> <p>## Affected Configurations</p> <p>This only impacts deployments that:</p> <p>- Use the node host / companion node execution path (`system.run` on a node). - Enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`). - Allow an attacker to invoke `system.run`.</p> <p>Default/non-node configurations are not affected.</p> <p>## Impact</p> <p>In affected configurations, an attacker who can invoke `system.run` can bypass allowlist enforcement and approval prompts by supplying an allowlisted `rawCommand` while providing a different `command[]` argv for execution.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.13` - Patched version: `&gt;= 2026.2.14` (planned next release)</p> <p>## Fix</p> <p>Enforce `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).</p> <p>## Fix Commit(s)</p> <p>- cb3290fca32593956638f161d9776266b90ab891</p> <p>## Release Process Note</p> <p>This advisory pre-sets the patched version to the planned next release (`2026.2.14`). Once `openclaw@2026.2.14` is published to npm, the advisory can be published without further edits.</p> <p>Thanks @christos-eth for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary</p> <p>A mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv.</p> <p>## Affected Configurations</p> <p>This only impacts deployments that:</p> <p>- Use the node host / companion node execution path (`system.run` on a node). - Enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`). - Allow an attacker to invoke `system.run`.</p> <p>Default/non-node configurations are not affected.</p> <p>## Impact</p> <p>In affected configurations, an attacker who can invoke `system.run` can bypass allowlist enforcement and approval prompts by supplying an allowlisted `rawCommand` while providing a different `command[]` argv for execution.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.13` - Patched version: `&gt;= 2026.2.14` (planned next release)</p> <p>## Fix</p> <p>Enforce `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).</p> <p>## Fix Commit(s)</p> <p>- cb3290fca32593956638f161d9776266b90ab891</p> <p>## Release Process Note</p> <p>This advisory pre-sets the patched version to the planned next release (`2026.2.14`). Once `openclaw@2026.2.14` is published to npm, the advisory can be published without further edits.</p> <p>Thanks @christos-eth for reporting.</p> https://vulnerability.circl.lu/vuln/ghsa-h3f9-mjwj-w476