Unrated severityNVD Advisory· Published Aug 6, 2026
mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization
CVE-2026-19006
Description
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 2026.2.5
Patches
Vulnerability mechanics
References
5- github.com/mf-yang/openclaw-cn/issues/563mitreexploitissue-tracking
- vuldb.com/cve/CVE-2026-19006mitrethird-party-advisory
- vuldb.com/submit/862642mitrethird-party-advisory
- vuldb.com/vuln/386389mitrevdb-entry
- vuldb.com/vuln/386389/ctimitresignaturepermissions-required
News mentions
0No linked articles in our index yet.