VULNERABILITY INTELLIGENCE

CVE-2026-32010

CVSS score8.8 HIGH

EPSS probability0.30%

CISA KEVNot currently listed

Published2026-03-19

Last modified2026-06-17

Description

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.