CVE-2026-32017 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using…
Medium CVSS: 6.0

CVE-2026-32017

OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using short-option payloads. Attackers can bypass argument validation by attaching short options like -o to whitelisted binaries, enabling unauthorized file-write operations that should be denied by safeBins checks.
Vendor
Openclaw
Product
Openclaw
CWE
CWE-184
Yayın Tarihi
2026-03-19 22:16:35
Güncelleme
2026-03-25 15:16:44
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-184 Openclaw MEDIUM Openclaw 2026

Referanslar

https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754 https://github.com/openclaw/openclaw/commit/cfe8457a0f4aae5324daec261d3b0aad1461a4bc https://github.com/openclaw/openclaw/commit/fec48a5006eab37c6a5821726ccaeec886486b13 https://github.com/openclaw/openclaw/security/advisories/GHSA-3x3x-h76w-hp98 https://www.vulncheck.com/advisories/openclaw-arbitrary-file-write-via-short-option-bypass-in-exec-allowlist