Beveiligingsadvies

CVE-2026-32973

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-29 12:44:25

Laatst bijgewerkt 2026-06-23 16:15:25

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POSIX paths. Attackers can exploit the ? wildcard matching across path segments to execute commands or paths not intended by operators.

← Alle CVE's bekijken Bekijk op cve.org ↗