Threats tagged 'ghsa-q2gc-xjqw-qp89'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.7	CVE-2026-42423OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec High7.72026-04-09GCVE DatabaseCVE-2026-42423 OpenClaw versions up to 2026.4.2 have a vulnerability where the strictInlineEval explicit-approval boundary can be bypassed due to an approval-timeout fallback on gateway and node execution hosts. This fallback allows inline eval commands to execute without the intended explicit approval. The issue is fixed in version 2026.4.8. Report on CVE-2026-42423 Vulnerability CWE-20 #ghsa-q2gc-xjqw-qp89 #npm	GCVE Database	2026-04-09

Page 1 of 1