CVE-2026-19006 | mf-yang openclaw-cn 2026.2.5 Ggateway Exec Approval Flow bash-tools.exec.ts authorization (Issue 563)

A vulnerability, which was classified as critical, was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization.

This vulnerability was named CVE-2026-19006. The attack may be performed from remote. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More