CVE-2026-8112

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-8112

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8112.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-8112

Published

2026-05-07T21:00:13.825Z

Modified

2026-07-15T01:49:19.187027502Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

8421bit MiniClaw kernel.ts executeCognitivePulse os command injection

Details

A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affected is the function executeCognitivePulse of the file src/kernel.ts. Performing a manipulation results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The patch is named 028f62216dee9f64833d0f1cfda7c217067ceba8. To fix this issue, it is recommended to deploy a patch.

Database specific

{
    "cwe_ids": [
        "CWE-77",
        "CWE-78"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8112.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "223c16a1088e138838dcbd18cd65a37c35ac5a84"
                },
                {
                    "last_affected": "223c16a1088e138838dcbd18cd65a37c35ac5a84"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/8421bit/miniclaw

Affected ranges

Type

GIT

Repo

https://github.com/8421bit/miniclaw

Events

Introduced

Fixed

028f62216dee9f64833d0f1cfda7c217067ceba8

Database specific

{
    "source": "REFERENCES"
}

Affected versions

v0.*

v0.8.0

v0.9.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8112.json"