CVE-2026-43530 in OpenClaw
Сводка
по MITRE • 05.05.2026
OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybox applet execution that allows attackers to obscure which applet would actually run. Attackers can exploit opaque multi-call binaries to bypass exec approval mechanisms and weaken risk classification of unsafe applet invocations.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.