一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月26日

CVE-2026-100559 [HIGH] – OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped new

未分类
📑 文章目录

OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can craft input with escaped newlines to bypass allowlist validation and execute additional commands without expected authorization prompts.