{"id":"CVE-2026-32010","aliases":["GHSA-4gc7-qcvf-38wg"],"url":"https://o3.security/vulnerability/CVE-2026-32010","summary":"OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter","details":"OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist mode with ask=on-miss enabled.","published":"2026-03-19T22:06:49.608Z","modified":"2026-08-07T11:50:55.941588548Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.22"}],"fix":{"url":"https://github.com/openclaw/openclaw/commit/57fbbaebca4d34d17549accf6092ae26eb7b605c","label":"openclaw/openclaw@57fbbae"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32010.json"},{"type":"ADVISORY","url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-4gc7-qcvf-38wg"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32010"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-sort-compress-program-parameter"},{"type":"FIX","url":"https://github.com/openclaw/openclaw/commit/57fbbaebca4d34d17549accf6092ae26eb7b605c"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T11:50:55.941588548Z"}}