Description
A vulnerability has been found in princezuda SafestClaw up to 4.2.4. This vulnerability affects the function ShellAction._validate_command of the file src/safestclaw/actions/shell.py of the component Built-in Web Interface. Such manipulation leads to incomplete blacklist. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The presence of this vulnerability remains uncertain at this time. The project maintainer explains: "On paper you're correct, this is a vulnerability. In practice, nothing your AI generated shows how it makes users vulnerable. It's open source. Someone can mod the shell allow list or remove that system. Present an actual poc that shows a threat to users."
Published: 2026-07-18
Score: 4.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability stems from an incomplete blacklist implemented in the ShellAction._validate_command function of the SafestClaw built‑in web interface. This flaw is a classic example of Type Confusion (CWE‑183) and Improper Control of Generation of Code (CWE‑184), allowing improper validation of user‑supplied commands, which could lead to execution of arbitrary shell commands on the host that runs SafestClaw when the attacker accesses the web interface locally.

Affected Systems

Versions of SafestClaw by princezuda up to 4.2.4 are affected. The flaw resides in src/safestclaw/actions/shell.py within the built‑in web interface component.

Risk and Exploitability

The CVSS score of 4.8 indicates a moderate impact. The EPSS score of less than 1% suggests the vulnerability is not likely to be widely exploited. The vulnerability is not listed in the CISA KEV catalog, and an attacker must first obtain local or near‑local access to the SafestClaw instance to leverage the incomplete blacklist.

Generated by OpenCVE AI on August 1, 2026 at 08:09 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade SafestClaw to a version newer than 4.2.4 where the command validation issue has been addressed.
  • If an update is not available, review and expand the blacklist in ShellAction._validate_command to reject all disallowed input before execution.
  • Restrict access to the SafestClaw web interface by placing the service behind a firewall or network segmentation, limiting exposure to trusted users only.

Generated by OpenCVE AI on August 1, 2026 at 08:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 22 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 18 Jul 2026 17:15:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in princezuda SafestClaw up to 4.2.4. This vulnerability affects the function ShellAction._validate_command of the file src/safestclaw/actions/shell.py of the component Built-in Web Interface. Such manipulation leads to incomplete blacklist. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The presence of this vulnerability remains uncertain at this time. The project maintainer explains: "On paper you're correct, this is a vulnerability. In practice, nothing your AI generated shows how it makes users vulnerable. It's open source. Someone can mod the shell allow list or remove that system. Present an actual poc that shows a threat to users."
Title princezuda SafestClaw Built-in Web shell.py ShellAction._validate_command incomplete blacklist
First Time appeared Princezuda
Princezuda safestclaw
Weaknesses CWE-183
CWE-184
CPEs cpe:2.3:a:princezuda:safestclaw:*:*:*:*:*:*:*:*
Vendors & Products Princezuda
Princezuda safestclaw
References
Metrics cvssV2_0

{'score': 4.3, 'vector': 'AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Princezuda Safestclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-07-22T15:47:31.469Z

Reserved: 2026-07-17T16:13:27.659Z

Link: CVE-2026-16129

cve-icon Vulnrichment

Updated: 2026-07-22T15:47:03.051Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-01T08:15:03Z

Weaknesses
  • CWE-183

    Permissive List of Allowed Inputs

  • CWE-184

    Incomplete List of Disallowed Inputs