Threat Intelligence Database

A command injection vulnerability exists in nearai ironclaw up to version 0.29.1 in the function classify_command_risk within src/tools/builtin/shell.rs. This vulnerability allows remote attackers with limited privileges to execute arbitrary commands. A patch identified by commit a1d7c3ba428ed575900469b207fb5668725f9a71 is available to address this issue. The vulnerability has a CVSS 3.1 score of 6.3, indicating a medium severity level.

CVE-2026-18980 is a command injection vulnerability in nearai ironclaw versions 0.29.0 and 0.29.1. The flaw exists in the function classify_command_risk within the file src/tools/builtin/shell.rs. This vulnerability allows remote attackers to execute arbitrary commands. A patch identified by commit a1d7c3ba428ed575900469b207fb5668725f9a71 is available to fix the issue. The vulnerability has a medium severity score of 5.3 and an exploit is publicly available, though no known active exploitation in the wild has been reported.

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of the file src/tools/builtin/path_utils.rs of the component write_file. The manipulation leads to link following. Local access is required to approach this attack. The exploit is publicly available and might be used. The identifier of the patch is 369ff3d240cf3c0787b50e1e9f182e1a06c71255. It is recommended to apply a patch to fix this issue.