CVE-2026-19006

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-19006

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19006.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-19006

Published

2026-08-06T06:00:11.430Z

Modified

2026-08-12T03:51:21.392615035Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization

Details

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cwe_ids": [
        "CWE-285",
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19006.json",
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/mf-yang/openclaw-cn

Affected ranges

Type

GIT

Repo

https://github.com/mf-yang/openclaw-cn

Events

Introduced

253435917c161937021a14f82462a60b55056984

Last affected

253435917c161937021a14f82462a60b55056984

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "2026.2.5"
        },
        {
            "last_affected": "2026.2.5"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2026.*

2026.2.5

v2026.*

v2026.2.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19006.json"