CVE-2026-26325
HighSummary
OpenClaw to osobisty asystent AI. Przed wersją 2026.2.14, niezgodność między `rawCommand` a `command[]` w obsłudze `system.run` na hoście węzła mogła prowadzić do oceny listy dozwolonych poleceń na jednym poleceniu, podczas gdy wykonywane było inne. Problem ten dotyczy tylko wdrożeń korzystających z tej ścieżki wykonawczej.
Risk Assessment
Organizacje mogą być narażone na nieautoryzowane wykonanie poleceń przez atakujących, co może prowadzić do poważnych naruszeń bezpieczeństwa. Wdrożenia, które nie korzystają z konfiguracji węzła, nie są dotknięte tą podatnością.
Recommendation
Zaleca się aktualizację do wersji 2026.2.14 lub nowszej, aby zapewnić zgodność między `rawCommand` a `command[]` oraz zminimalizować ryzyko związane z nieautoryzowanym dostępem do funkcji `system.run`.
Related vulnerabilities
- CVE-2026-87701Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85889Critical
Missing authentication for a critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-85885Critical
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
- CVE-2026-83944Critical
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-77903Critical
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70200Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70009Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69865Critical
Authorization bypass through a user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69399Critical
Elevation of Privilege vulnerability in Azure Arc. Technical details were not provided in the description.
- CVE-2026-76949Critical
A vulnerability in the ash_authentication library (Elixir) allows an attacker who can plant a remember-me cookie in a victim's browser to replace the victim's authenticated session with one for the attacker's own account. The issue stems from a mismatch between the session keys used by the guard and the reader, causing remember-me sign-in to run on every request.
Original NVD description (English source)
OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the node host `system.run` handler could cause allowlist/approval evaluation to be performed on one command while executing a different argv. This only impacts deployments that use the node host / companion node execution path (`system.run` on a node), enable allowlist-based exec policy (`security=allowlist`) with approval prompting driven by allowlist misses (for example `ask=on-miss`), allow an attacker to invoke `system.run`. Default/non-node configurations are not affected. Version 2026.2.14 enforces `rawCommand`/`command[]` consistency (gateway fail-fast + node host validation).