The vulnerability CVE-2026-18980 affects nearai ironclaw up to versions 0.29.1. It is a command injection flaw in the classify_command_risk function of src/tools/builtin/shell.rs. This allows remote attackers to inject and execute arbitrary commands on the affected system. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity) with network attack vector, low complexity, no privileges required, and no user interaction needed. A patch identified by commit a1d7c3ba428ed575900469b207fb5668725f9a71 is available and applying it is advised to remediate the issue. Although an exploit is publicly available, there are no reports of active exploitation in the wild.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary commands on the affected system, potentially leading to unauthorized actions or system compromise. The medium CVSS score reflects a moderate level of risk due to the network attack vector and ease of exploitation without user interaction or privileges. However, no active exploitation in the wild has been reported at this time.

A patch identified by commit a1d7c3ba428ed575900469b207fb5668725f9a71 is available and should be applied to affected versions 0.29.0 and 0.29.1 of nearai ironclaw to resolve this command injection vulnerability. No vendor advisory was provided to indicate alternative mitigations or that no action is required. Therefore, applying the official patch is the recommended remediation.