CVE-2026-4040: falha de média gravidade em OpenClaw
OpenClaw File Existence tools.exec.safeBins information exposure
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.1%
A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to version 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
Produtos afetados
n/a · OpenClawReferências
https://github.com/openclaw/openclaw/https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754https://github.com/openclaw/openclaw/releases/tag/v2026.2.19-beta.1https://github.com/openclaw/openclaw/security/advisories/GHSA-6c9j-x93c-rw6jhttps://vuldb.com/?ctiid.350652https://vuldb.com/?id.350652https://vuldb.com/?submit.769581