https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 10:46:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-29610 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables through node-host execution or project-local bootstrapping. Attackers with authenticated access to node-host execution surfaces or those running OpenClaw in attacker-controlled directories can place malicious executables in PATH to override allowlisted safe-bin commands and achieve arbitrary command execution.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables through node-host execution or project-local bootstrapping. Attackers with authenticated access to node-host execution surfaces or those running OpenClaw in attacker-controlled directories can place malicious executables in PATH to override allowlisted safe-bin commands and achieve arbitrary command execution.</p> https://vulnerability.circl.lu/vuln/cve-2026-29610 https://vulnerability.circl.lu/vuln/ghsa-jqpq-mgvm-f9r6 <p><strong>Affected:</strong> npm: openclaw</p> <p># Command hijacking via PATH handling</p> <p>**Discovered:** 2026-02-04 **Reporter:** @akhmittra</p> <p>## Summary</p> <p>OpenClaw previously accepted untrusted PATH sources in limited situations. In affected versions, this could cause OpenClaw to resolve and execute an unintended binary (&#34;command hijacking&#34;) when running host commands.</p> <p>This issue primarily matters when OpenClaw is relying on allowlist/safe-bin protections and expects `PATH` to be trustworthy.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected: `&lt; 2026.2.14` - Patched: `&gt;= 2026.2.14` (planned next release)</p> <p>## What Is Required To Trigger This</p> <p>### A) Node Host PATH override (remote command hijack)</p> <p>An attacker needs all of the following:</p> <p>- Authenticated/authorized access to an execution surface that can invoke node-host execution (for example, a compromised gateway or a caller that can issue `system.run`). - A node host connected and exposing `system.run`. - A configuration where allowlist/safe-bins are expected to restrict execution (this is not meaningful if full arbitrary exec is already allowed). - The ability to pass request-scoped environment overrides (specifically `PATH`) into `system.run`. - A way to place an attacker-controlled executable earlier in `PATH` (for example, a writable directory on the node host), with a name that matches an allowlisted/safe-bin command that OpenClaw will run.</p> <p>Notes:</p> <p>- OpenClaw deployments commonly require a gateway token/password (or equivalent transport authen…</p> <p><strong>Affected:</strong> npm: openclaw</p> <p># Command hijacking via PATH handling</p> <p>**Discovered:** 2026-02-04 **Reporter:** @akhmittra</p> <p>## Summary</p> <p>OpenClaw previously accepted untrusted PATH sources in limited situations. In affected versions, this could cause OpenClaw to resolve and execute an unintended binary (&#34;command hijacking&#34;) when running host commands.</p> <p>This issue primarily matters when OpenClaw is relying on allowlist/safe-bin protections and expects `PATH` to be trustworthy.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected: `&lt; 2026.2.14` - Patched: `&gt;= 2026.2.14` (planned next release)</p> <p>## What Is Required To Trigger This</p> <p>### A) Node Host PATH override (remote command hijack)</p> <p>An attacker needs all of the following:</p> <p>- Authenticated/authorized access to an execution surface that can invoke node-host execution (for example, a compromised gateway or a caller that can issue `system.run`). - A node host connected and exposing `system.run`. - A configuration where allowlist/safe-bins are expected to restrict execution (this is not meaningful if full arbitrary exec is already allowed). - The ability to pass request-scoped environment overrides (specifically `PATH`) into `system.run`. - A way to place an attacker-controlled executable earlier in `PATH` (for example, a writable directory on the node host), with a name that matches an allowlisted/safe-bin command that OpenClaw will run.</p> <p>Notes:</p> <p>- OpenClaw deployments commonly require a gateway token/password (or equivalent transport authen…</p> https://vulnerability.circl.lu/vuln/ghsa-jqpq-mgvm-f9r6