https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:25:20.240711+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-43530 BREW-openclaw-cli-CVE-2026-43530 — OpenClaw: busybox and toybox applet execution weakened exec approval binding 2026-10-04T20:25:20.261035+00:00

Affected: Homebrew: openclaw-cli

## Summary

busybox and toybox applet execution weakened exec approval binding.

## Affected Packages / Versions

- Package: `openclaw` - Ecosystem: npm - Affected versions: `>= 2026.2.23 < 2026.4.12` - Patched versions: `>= 2026.4.12`

## Impact

Opaque multi-call binaries such as `busybox` and `toybox` could obscure which applet or script-like behavior would actually run, weakening exec approval binding and risk classification.

## Technical Details

The fix treats `busybox` and `toybox` as opaque mutable script runners and fails closed rather than binding unsafe applet invocations.

## Fix

The issue was fixed in #65713. The first stable tag containing the fix is `v2026.4.12`, and `openclaw@2026.4.14` includes the fix.

## Fix Commit(s)

- `666f48d9b882a8a1415ca53f9567c72499d850c9` - PR: #65713

## Release Process Note

Users should upgrade to `openclaw` 2026.4.12 or newer. The latest npm release, `2026.4.14`, already includes the fix.

## Credits

Thanks to @decsecre583 for reporting this issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-308579 EUVD-2026-308579 2026-10-04T20:25:20.261133+00:00 EUVD-2026-308579 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43530 fkie_cve-2026-43530 2026-10-04T20:25:20.261150+00:00

OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybox applet execution that allows attackers to obscure which applet would actually run. Attackers can exploit opaque multi-call binaries to bypass exec approval mechanisms and weaken risk classification of unsafe applet invocations.

 https://cve.radiocsirt.org/vuln/ghsa-2cq5-mf3v-mx44 GHSA-2cq5-mf3v-mx44 — OpenClaw: busybox and toybox applet execution weakened exec approval binding 2026-10-04T20:25:20.261173+00:00

Affected: npm: openclaw

## Summary

busybox and toybox applet execution weakened exec approval binding.

## Affected Packages / Versions

- Package: `openclaw` - Ecosystem: npm - Affected versions: `>= 2026.2.23 < 2026.4.12` - Patched versions: `>= 2026.4.12`

## Impact

Opaque multi-call binaries such as `busybox` and `toybox` could obscure which applet or script-like behavior would actually run, weakening exec approval binding and risk classification.

## Technical Details

The fix treats `busybox` and `toybox` as opaque mutable script runners and fails closed rather than binding unsafe applet invocations.

## Fix

The issue was fixed in #65713. The first stable tag containing the fix is `v2026.4.12`, and `openclaw@2026.4.14` includes the fix.

## Fix Commit(s)

- `666f48d9b882a8a1415ca53f9567c72499d850c9` - PR: #65713

## Release Process Note

Users should upgrade to `openclaw` 2026.4.12 or newer. The latest npm release, `2026.4.14`, already includes the fix.

## Credits

Thanks to @decsecre583 for reporting this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1161 WID-SEC-W-2026-1161 — OpenClaw: Mehrere Schwachstellen 2026-10-04T20:25:20.261208+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.