CVE-2026-32017 in OpenClaw
Zusammenfassung
von MITRE • 20.03.2026
OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using short-option payloads. Attackers can bypass argument validation by attaching short options like -o to whitelisted binaries, enabling unauthorized file-write operations that should be denied by safeBins checks.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.