CVE-2026-32059 - Vulnerability Analysis

Overview

OpenClaw < 2026.2.23 contains a command injection caused by improper validation of GNU long-option abbreviations in tools.exec.safeBins for the sort command, letting remote attackers bypass denied-flag checks and execute arbitrary sort commands, exploit requires remote access.

Severity & Score

Impact

Remote attackers can execute arbitrary sort commands bypassing approval, potentially leading to unauthorized command execution.

Mitigation

Update to version 2026.2.23 or later.

References

• https://github.com/openclaw/openclaw/commit/3b8e33037ae2e12af7beb56fcf0346f1f8cbde6f
• https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6h-g97w-fg78
• https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-sort-long-option-abbreviation-in-toolsexecsafebins

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 11, 2026

🟠 CVE-2026-32059 - High (8.8) OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing attackers to bypass denied-flag checks via abbreviated options. Remote attackers can... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32059/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner