CVE-2026-9565

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-9565
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-9565.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-9565
Published
2026-05-26T16:45:10.781Z
Modified
2026-08-07T11:31:24.352998037Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection
Details

A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file apps/runtime/src-tauri/src/agent/tools/bash.rs of the component Blacklist Handler. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9565.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.6.1"
                },
                {
                    "last_affected": "0.6.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-77",
        "CWE-78"
    ]
}
References

Affected packages

Git / github.com/haojing8312/workclaw

Affected ranges

Type
GIT
Repo
https://github.com/haojing8312/workclaw
Events
Introduced
c314035876a2d503a0d1b28304af999305ae6e46
Last affected
3b21da07abbae3991fda38c27a007c3282aa6faf
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0.6.0"
        },
        {
            "last_affected": "0.6.0"
        },
        {
            "introduced": "0.6.2"
        },
        {
            "last_affected": "0.6.2"
        },
        {
            "introduced": "0.6.3"
        },
        {
            "last_affected": "0.6.3"
        },
        {
            "introduced": "0.6.4"
        },
        {
            "last_affected": "0.6.4"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.6.0
0.6.2
0.6.3
0.6.4
v0.*
v0.6.0
v0.6.2
v0.6.3
v0.6.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-9565.json"