princezuda SafestClaw up to 4.2.4 Built-in Web Interface shell.py ShellAction._validate_command incomplete blacklist ⚔ [Disputed]

Summaryinfo

A vulnerability marked as problematic has been reported in princezuda SafestClaw up to 4.2.4. This issue affects the function ShellAction._validate_command of the file src/safestclaw/actions/shell.py of the component Built-in Web Interface. Performing a manipulation results in incomplete blacklist. This vulnerability is known as CVE-2026-16129. Attacking locally is a requirement. Furthermore, an exploit is available. There are still doubts about whether this vulnerability truly exists. The project maintainer explains: "On paper you're correct, this is a vulnerability. In practice, nothing your AI generated shows how it makes users vulnerable. It's open source. Someone can mod the shell allow list or remove that system. Present an actual poc that shows a threat to users."

Detailsinfo

A vulnerability classified as problematic has been found in princezuda SafestClaw up to 4.2.4. This affects the function ShellAction._validate_command of the file src/safestclaw/actions/shell.py of the component Built-in Web Interface. The manipulation with an unknown input leads to a incomplete blacklist vulnerability. CWE is classifying the issue as CWE-184. The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses. This is going to have an impact on confidentiality, integrity, and availability.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-16129. The exploitability is told to be easy. An attack has to be approached locally. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1562.006 for this issue.

The exploit is shared for download at github.com. It is declared as proof-of-concept. The real existence of this vulnerability is still doubted at the moment. The project maintainer explains: "On paper you're correct, this is a vulnerability. In practice, nothing your AI generated shows how it makes users vulnerable. It's open source. Someone can mod the shell allow list or remove that system. Present an actual poc that shows a threat to users."

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• princezuda

Name

• SafestClaw

Version

• 4.2.0
• 4.2.1
• 4.2.2
• 4.2.3
• 4.2.4

Website

• Product: https://github.com/princezuda/safestclaw/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #856882: princezuda safestclaw 4.2.4 Incomplete List of Disallowed Inputs (CWE-184) (by Eric-x)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion