漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
OpenClaw < 2026.2.14 - Command Hijacking via Unsafe PATH Handling
漏洞信息
OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment variables through node-host execution or project-local bootstrapping. Attackers with authenticated access to node-host execution surfaces or those running OpenClaw in attacker-controlled directories can place malicious executables in PATH to override allowlisted safe-bin commands and achieve arbitrary command execution.
漏洞信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞
对搜索路径元素未加控制
漏洞
OpenClaw 代码问题漏洞
漏洞信息
OpenClaw是openclaw开源的一个智能人工助理。 OpenClaw 2026.2.14之前版本存在代码问题漏洞，该漏洞源于命令劫持，攻击者可通过操纵PATH环境变量执行非预期二进制文件，可能导致任意命令执行。
漏洞信息
N/A
漏洞
N/A