CVE-2026-19006
Received Received - Intake

Incorrect Authorization in mf-yang openclaw-cn

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-19006
EUVD
EUVD-2026-53730

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mf-yang openclaw-cn 2026.2.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authorization bypass in the Ggateway Exec Approval Flow of mf-yang openclaw-cn 2026.2.5. It allows attackers to execute unauthorized commands remotely by reusing a previously approved 'allow-always' command for different payloads through the same busybox path. The system stores the approved executable path rather than the specific command, enabling bypass of approval prompts.

Detection Guidance

Check for unauthorized command execution via the gateway exec approval flow. Inspect logs for repeated approvals of busybox sh -c commands with varying payloads. Look for mismatches between approved paths and actual executed commands in system logs.

Impact Analysis

If exploited, this vulnerability could allow unauthorized execution of arbitrary commands on the affected system. Attackers could gain control over the system, access sensitive data, or perform actions without proper authorization. The impact depends on the privileges of the openclaw-cn service.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating compliance requirements such as GDPR's data protection principles or HIPAA's security rules. Unauthorized command execution may result in data leaks, unauthorized modifications, or loss of audit trails, all of which are critical compliance violations.

Mitigation Strategies

Disable the gateway exec approval flow temporarily. Update to a patched version if available. Review and restrict access to the busybox sh -c command path. Monitor for unauthorized command executions and revoke any suspicious approvals.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19006. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart