CVE-2026-18980 in ironclaw
Summary
by MITRE • 08/06/2026
A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin/shell.rs. Such manipulation leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the patch is a1d7c3ba428ed575900469b207fb5668725f9a71. Applying a patch is advised to resolve this issue.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 08/06/2026
The vulnerability in nearai ironclaw version 0.29.1 represents a critical command injection flaw within the classify_command_risk function located in src/tools/builtin/shell.rs. This security weakness stems from inadequate input validation and sanitization mechanisms that fail to properly handle malicious command sequences passed through the shell interface. The vulnerability allows attackers to execute arbitrary commands on the affected system by manipulating the command classification logic, effectively bypassing intended security controls and access restrictions.
This particular flaw manifests as a direct command injection vulnerability that operates at the system level through shell execution contexts. The technical implementation issue lies in how user-supplied input is processed within the classify_command_risk function without proper sanitization or escaping mechanisms. Attackers can craft malicious payloads that exploit the insufficient validation to inject additional commands into the shell execution pipeline, potentially leading to complete system compromise. The vulnerability's remote exploitability means that attackers do not require local access to the system, making it particularly dangerous in networked environments where the application might be exposed to untrusted inputs.
The operational impact of this vulnerability extends beyond simple command execution to encompass potential full system compromise and data exfiltration capabilities. An attacker who successfully exploits this vulnerability could gain root-level privileges, install backdoors, modify system files, or access sensitive data stored on the affected system. The publicly available exploit significantly increases the risk exposure since it removes the barrier to entry for potential attackers who may not possess advanced exploitation skills. This makes the vulnerability particularly dangerous in production environments where the application might be exposed to external networks without proper network segmentation.
Security mitigation requires immediate patch application using the provided fix identified by commit a1d7c3ba428ed575900469b207fb5668725f9a71. Organizations should also implement additional protective measures including input validation at multiple layers, network segmentation to limit exposure, and monitoring for suspicious command execution patterns. The vulnerability aligns with CWE-77 and CWE-94 categories related to command injection and code injection respectively, and maps to attack techniques in the MITRE ATT&CK framework under T1059 Command and Scripting Interpreter and T1068 Exploitation for Privilege Escalation. Regular security assessments and vulnerability scanning should be conducted to identify similar issues in other components of the application stack.