Search: CVE-2026-44115

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.4%	CVE-2026-44115Openclaw cli · OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs HighEPSS 0.4%2026-08-13GCVE DatabaseCVE-2026-44115 OpenClaw CLI versions up to 2026.4.21 have a vulnerability where the exec allowlist analysis fails to reject shell expansions in unquoted heredocs. This flaw allows an approved command to appear safe while the shell evaluates potentially unsafe expansions at runtime. The issue is fixed in version 2026.4.22 by enhancing the exec command analyzer to properly track heredoc bodies and reject unquoted expansions. EPSS 0.4%Vulnerability #brew-openclaw-cli-cve-2026-44115 #homebrew	GCVE Database	2026-08-13

Page 1 of 1 · 1 duplicate CVE record merged