https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:19:08 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31997 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.3.1 fail to pin executable identity for non-path-like argv[0] tokens in system.run approvals, allowing post-approval executable rebind attacks. Attackers can modify PATH resolution after approval to execute a different binary than the operator approved, enabling arbitrary command execution.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.3.1 fail to pin executable identity for non-path-like argv[0] tokens in system.run approvals, allowing post-approval executable rebind attacks. Attackers can modify PATH resolution after approval to execute a different binary than the operator approved, enabling arbitrary command execution.</p> https://vulnerability.circl.lu/vuln/cve-2026-31997 https://vulnerability.circl.lu/vuln/ghsa-q399-23r3-hfx4 <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary For `host=node` runs, approvals validated command context but did not pin executable identity for non-path-like `argv[0]` tokens (for example `tr`). If PATH resolution changed after approval, execution could run a different binary.</p> <p>### Impact A previously approved action could execute a different executable than the operator approved.</p> <p>### Fix Node `system.run` approvals now require immutable `systemRunPlan` data, and path-token commands are pinned to canonical executable identity (`realpath`) across approval and execution.</p> <p>### Affected and Patched Versions - Affected: `&lt;= 2026.2.26` - Patched: `2026.3.1`</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary For `host=node` runs, approvals validated command context but did not pin executable identity for non-path-like `argv[0]` tokens (for example `tr`). If PATH resolution changed after approval, execution could run a different binary.</p> <p>### Impact A previously approved action could execute a different executable than the operator approved.</p> <p>### Fix Node `system.run` approvals now require immutable `systemRunPlan` data, and path-token commands are pinned to canonical executable identity (`realpath`) across approval and execution.</p> <p>### Affected and Patched Versions - Affected: `&lt;= 2026.2.26` - Patched: `2026.3.1`</p> https://vulnerability.circl.lu/vuln/ghsa-q399-23r3-hfx4