https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:02:20.172038+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05009 bdu:2026-05009 2026-10-09T19:02:20.175770+00:00 bdu:2026-05009 https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-31993 BREW-openclaw-cli-CVE-2026-31993 — OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains 2026-10-09T19:02:20.175812+00:00

Affected: Homebrew: openclaw-cli

### Summary In the macOS companion app (**currently beta**), a parsing mismatch in exec approvals could let shell-chain payloads pass allowlist checks in `system.run` under specific settings.

### Impact This path requires all of the following: - authenticated caller with `operator.write` - paired macOS beta node host - exec approvals set to `security=allowlist` and `ask=on-miss`

Under those conditions, a shell-chain command could be approved from an incomplete command view and then executed on the paired macOS host.

### Default Install Status Default installs are not affected.

### Affected Packages / Versions - Package: `openclaw` (npm) - Affected: `<= 2026.2.21-2` - Patched (planned next release): `>= 2026.2.22`

### Technical Details The fix hardens macOS allowlist resolution by evaluating shell chains per segment and failing closed on unsafe shell-substitution parsing in allowlist mode.

### Product Status Note The affected macOS companion app path is currently in beta.

### Fix Commit(s) - `5da03e622119fa012285cdb590fcf4264c965cb5` - `e371da38aab99521c4e076cd3d95fd775e00b784`

### Release Process Note `patched_versions` is pre-set to the planned next npm release (`2026.2.22`) so once that version is published, this advisory can be published without additional metadata edits.

OpenClaw thanks @tdjackey for reporting.

 https://cve.radiocsirt.org/vuln/euvd-2026-329390 EUVD-2026-329390 2026-10-09T19:02:20.175880+00:00 EUVD-2026-329390 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31993 fkie_cve-2026-31993 2026-10-09T19:02:20.175910+00:00

OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app that allows authenticated operators to bypass exec approval checks. Attackers with operator.write privileges and a paired macOS beta node can craft shell-chain payloads that pass incomplete allowlist validation and execute arbitrary commands on the paired host.

 https://cve.radiocsirt.org/vuln/ghsa-5f9p-f3w2-fwch GHSA-5f9p-f3w2-fwch — OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains 2026-10-09T19:02:20.175950+00:00

Affected: npm: openclaw

### Summary In the macOS companion app (**currently beta**), a parsing mismatch in exec approvals could let shell-chain payloads pass allowlist checks in `system.run` under specific settings.

### Impact This path requires all of the following: - authenticated caller with `operator.write` - paired macOS beta node host - exec approvals set to `security=allowlist` and `ask=on-miss`

Under those conditions, a shell-chain command could be approved from an incomplete command view and then executed on the paired macOS host.

### Default Install Status Default installs are not affected.

### Affected Packages / Versions - Package: `openclaw` (npm) - Affected: `<= 2026.2.21-2` - Patched (planned next release): `>= 2026.2.22`

### Technical Details The fix hardens macOS allowlist resolution by evaluating shell chains per segment and failing closed on unsafe shell-substitution parsing in allowlist mode.

### Product Status Note The affected macOS companion app path is currently in beta.

### Fix Commit(s) - `5da03e622119fa012285cdb590fcf4264c965cb5` - `e371da38aab99521c4e076cd3d95fd775e00b784`

### Release Process Note `patched_versions` is pre-set to the planned next npm release (`2026.2.22`) so once that version is published, this advisory can be published without additional metadata edits.

OpenClaw thanks @tdjackey for reporting.