Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing attackers to bypass denied-flag checks via abbreviated options. Remote attackers can execute sort commands with abbreviated long options to skip approval requirements in allowlist mode.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-11 | 3 | Disclosure3 |
| 2026-03-12 | 1 | General1 |
| 2026-03-15 | 1 | Disclosure1 |
| 2026-03-17 | 1 | General1 |
CVE-2026-32059: OpenClaw Allowlist Bypass Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q047dGQj0
Post summary
The snippet only lists the CVE name and a link, offering no concrete technical, exploit, or mitigation details.
CVE-2026-32059 OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing att… https://www.cve.org/CVERecord?id=CVE-2026-32059
Post summary
CVE-2026-32059 describes a validation failure in OpenClaw's sort command that could allow remote command injection, with the issue fixed in version 2026.2.23.
CVE Alert: CVE-2026-32059 - openclaw - openclaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-32059-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-32059 #openclaw #
Post summary
The tweet links to a CVE alert for CVE‑2026‑32059 but provides no technical details, PoC, exploit tool, active exploitation evidence, or patch information.
🚨 THE ATTACK SURFACE WIDENED OVERNIGHT: NEW OPENCLAW CVEs, RUST SUPPLY CHAIN, CHINA'S SECOND WARNING Two new HIGH severity CVEs disclosed today: → CVE-2026-32060: Path traversal in apply_patch — write or delete files outside your workspace. Patch: 2026.2.14+ → CVE-2026-32059: GNU long-option bypass in safeBins sort validation. Patch: 2026.2.22-2+ Endor Labs audited OpenClaw independently: 6 additional vulnerabilities found — SSRF, missing authentication, more path traversal. This is a sustained audit wave, not isolated bugs. Supply chain now hitting developer toolchain (CVE-2026-28353): 5 malicious Rust crates on http://crates.io targeting AI coding CLIs — delivered via weaponized Open VSX extension (v1.8.12-1.8.13). After npm (14K downloads) and ClawHub (341 skills), attackers are inside the IDE extension layer. China's CNCERT/CC just issued its second OpenClaw advisory in 72 hours — following MIIT's Monday warning. Now the national cybersecurity coordination center is flagging prompt injection, insufficient permissions, and default config data leaks. The 72-hour escalation: → npm supply chain → ClawHub (341 compromised skills) → Two new core CVEs → Rust crate toolchain attack → Two nation-state advisories Every layer is live. Update OpenClaw now. Audit every extension and crate in your build chain. #BNN #AgentSecurity #OpenClaw #CVE #SupplyChain
Post summary
The post announces two new high-severity CVEs in OpenClaw, lists their patches, details technical aspects, and highlights related supply‑chain threats, but does not provide PoC, exploit code, or proof of active exploitation.
[CVE-2026-32059: HIGH] Cybersecurity Alert: OpenClaw 2026.2.22-2 allows remote attackers to execute unauthorized sort commands by exploiting validation flaws in GNU long-option abbreviations. Update to versi...#cve,CVE-2026-32059,#cybersecurity https://cvefind.com/CVE-2026-32059
Post summary
The alert announces CVE-2026-32059, a high‑severity flaw in OpenClaw that allows remote command execution via flawed GNU long‑option parsing, and recommends updating to a patched version.
🟠 CVE-2026-32059 - High OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing attackers to bypass denied-f... https://www.thehackerwire.com/vulnerability/CVE-2026-32059/ https://t.co/mOd3ChGaIJ
Post summary
The tweet discloses a high‑severity vulnerability (CVE‑2026‑32059) in OpenClaw that lets attackers bypass sort command restrictions by exploiting improper long‑option validation in tools.exec.safeBins.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |