https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:37:08.404796+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-32973 BREW-openclaw-cli-CVE-2026-32973 — OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths 2026-10-02T18:37:08.413459+00:00

Affected: Homebrew: openclaw-cli

### Summary

`matchesExecAllowlistPattern` normalized patterns and targets with lowercasing and compiled glob matching too broadly on POSIX. In addition, the `?` wildcard could match `/`, which allowed matches to cross path segments.

### Impact

These matching rules could overmatch allowlist entries and permit commands or executable paths that an operator did not intend to approve.

### Affected versions

`openclaw` `<= 2026.3.8`

### Patch

Fixed in `openclaw` `2026.3.11` and included in later releases such as `2026.3.12`. Exec allowlist matching now respects the intended path semantics, and regression tests cover the POSIX case-folding and slash-crossing cases.

 https://cve.radiocsirt.org/vuln/cnvd-2026-16894 cnvd-2026-16894 2026-10-02T18:37:08.413511+00:00 cnvd-2026-16894 https://cve.radiocsirt.org/vuln/euvd-2026-329477 EUVD-2026-329477 2026-10-02T18:37:08.413528+00:00 EUVD-2026-329477 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32973 fkie_cve-2026-32973 2026-10-02T18:37:08.413540+00:00

OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POSIX paths. Attackers can exploit the ? wildcard matching across path segments to execute commands or paths not intended by operators.

 https://cve.radiocsirt.org/vuln/ghsa-3pvp-95ff-24g4 GHSA-3pvp-95ff-24g4 2026-10-02T18:37:08.413561+00:00

OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POSIX paths. Attackers can exploit the ? wildcard matching across path segments to execute commands or paths not intended by operators.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0711 WID-SEC-W-2026-0711 — OpenClaw: Mehrere Schwachstellen 2026-10-02T18:37:08.413575+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.