LOW 2.1 NVD
CVE-2026-19006
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
References
- https://github.com/mf-yang/openclaw-cn/
- https://github.com/mf-yang/openclaw-cn/issues/563
- https://vuldb.com/cve/CVE-2026-19006
- https://vuldb.com/submit/862642
- https://vuldb.com/vuln/386389
This low severity vulnerability with a CVSS score of 2.1 was published on 2026-08-06 via NVD.
vulnfeed aggregates 9332 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.