This vulnerability in haojing8312 WorkClaw (up to version 0.6.4) allows remote attackers to perform OS command injection via manipulation of the is_dangerous function in the Blacklist Handler component. The affected code resides in apps/runtime/src-tauri/src/agent/tools/bash.rs. The flaw enables execution of arbitrary OS commands remotely without requiring user interaction, with low complexity and privileges needed. The issue was responsibly disclosed but remains unpatched as of the publication date.

Successful exploitation could allow an attacker to execute arbitrary operating system commands on the affected system remotely. This could lead to unauthorized system control or data compromise depending on the privileges of the affected process. However, the vulnerability requires low privileges and has low vector and impact complexity, resulting in a medium severity rating. There are no known exploits in the wild at this time.

No official fix or patch is currently available, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates and consider applying network-level restrictions to limit remote access to the vulnerable component. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.