CVE-2026-32010
MEDIUM
openclaw
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Mar 19, 2026
Vendor
openclaw
Description
OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.