CVE-2026-32010CWE-78

OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter

Medium · published March 19, 2026

CVSS v4.0
5.8
EPSS
0%
Percentile
35.3
In the wild
Unconfirmed
What it is

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.

The record
Technical detail
CVSS v4.0
5.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00421 · 35.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-03-19T22:06Z
EPSS history
Timeline
  • 19 MAR 22:06Z
    OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter
    cvelistv5