CVE-2026-31997
CVE-2026-31997 · OpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run Approvals
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
OpenClaw versions prior to 2026.3.1 fail to pin executable identity for non-path-like argv[0] tokens in system.run approvals, allowing post-approval executable rebind attacks. Attackers can modify PATH resolution after approval to execute a different binary than the operator approved, enabling arbitrary command execution.
CVSS 4.4 · Media · EPSS 0,1% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: node