Threats tagged 'ghsa-p2px-f69r-9h28'

CVE-2026-19006 is a medium severity vulnerability in mf-yang openclaw-cn version 2026.2.5 affecting the Ggateway Exec Approval Flow component. It involves incorrect authorization due to manipulation in the src/agents/bash-tools.exec.ts file. The vulnerability can be exploited remotely and public exploit code is available. The project has been notified but has not yet responded or issued a fix.