Threats Tagged 'ghsa-mhq8-78pj-5j79'
View all threats tagged with 'ghsa-mhq8-78pj-5j79'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-mhq8-78pj-5j79'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-mhq8-78pj-5j79: OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion 0 OpenClaw's POSIX node system.run safe-bin allowlist can be bypassed due to shell expansion altering command interpretation. This allows a lower-privilege operator to cause an approved safe-bin command to read unintended local files on the node. The issue affects deployments using safe-bin or allowlist auto-approval with shell-expanded arguments on POSIX nodes. It is a policy enforcement gap in argument validation, not a direct unauthenticated takeover. The vulnerability is patched in OpenClaw version 2026.5.18. Join the discussion | GCVE Database | 07/02/2026, 16:05:38 UTC Added: 07/02/2026, 22:57:22 UTC |
Showing 1 to 1 of 1 result