The bug is an OS command injection flaw in the ExecTool.execute function of the FoundDream miniclawd project. The function accepts external input and forwards it directly to the operating system shell. Because the injected string is not validated or escaped, a malicious user can craft input that causes the shell to run arbitrary commands. The weakness is classified as CWE‑77 and CWE‑78. The impact is that anyone who can make the application invoke ExecTool.execute with attacker‑controlled input may be able to run unauthorized commands on the host.

All instances of FoundDream miniclawd that contain or are older than the reference commit 2d65665046e2222eeea76cafc8570ed546a8c125 are affected. The project does not use semantic versioning, so it is unclear which released builds after this commit may still be vulnerable, but any code base still containing the referenced commit carries the risk.

The CVSS score of 6.9 indicates a moderate severity. The EPSS score of about 1% indicates a low but non‑zero likelihood that the vulnerability is actually exploited. The flaw is not listed in the CISA KEV catalog. The binary function can be invoked remotely via exposed interfaces that call ExecTool.execute. While the command injection allows execution of arbitrary OS commands, whether an attacker can achieve full system compromise depends on the privileges with which ExecTool.execute runs; it could potentially provide complete control over the affected system, but this outcome is conditional on successful exploitation and the system’s privilege configuration.