Description
A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file apps/runtime/src-tauri/src/agent/tools/bash.rs of the component Blacklist Handler. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-26
Score: 5.3 Medium
EPSS: 1.1% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The function is_dangerous in WorkClaw, located in apps/runtime/src-tauri/src/agent/tools/bash.rs, fails to sanitize user input before passing it to the operating system shell. This bug constitutes an OS command injection flaw (CWE-77) and a direct invocation of a system shell (CWE-78). An attacker can supply crafted data that is executed with the privileges of the running process, enabling the execution of arbitrary commands on the host. The description explicitly states that the issue can be exploited remotely and that the attack can be executed from outside the host.

Affected Systems

The vulnerability affects the haojing8312 WorkClaw product for versions up to and including 0.6.4. No other versions are listed as impacted, and the vendor is haojing8312 with the product name WorkClaw.

Risk and Exploitability

The CVSS score of 5.3 reflects a medium severity because the impact is limited to command execution through insecure function usage. The EPSS score is not available, and the vulnerability has not been listed in the CISA KEV catalog. However, the exploit is publicly disclosed and can be performed remotely, which increases the practical risk. Because no patch or fix has yet been released by the maintainer, the exploitation window remains open until an official update is issued.

Generated by OpenCVE AI on May 26, 2026 at 18:36 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Limit the Blacklist Handler to trusted input only, implementing a strict whitelist of allowed commands and rejecting any untrusted data.
  • Apply input validation or sanitization to the arguments passed to is_dangerous, ensuring that shell metacharacters are escaped or removed.
  • Upgrade haojing8312 WorkClaw to a patched version when the maintainer releases an update, or remove the vulnerable component from the application if an upgrade is not feasible.

Generated by OpenCVE AI on May 26, 2026 at 18:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 28 May 2026 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 26 May 2026 17:00:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file apps/runtime/src-tauri/src/agent/tools/bash.rs of the component Blacklist Handler. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Title haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection
First Time appeared Haojing8312
Haojing8312 workclaw
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:haojing8312:workclaw:*:*:*:*:*:*:*:*
Vendors & Products Haojing8312
Haojing8312 workclaw
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Haojing8312 Workclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-05-28T14:00:38.706Z

Reserved: 2026-05-26T10:39:05.981Z

Link: CVE-2026-9565

cve-icon Vulnrichment

Updated: 2026-05-28T14:00:32.517Z

cve-icon NVD

Status : Deferred

Published: 2026-05-26T17:16:57.750

Modified: 2026-05-26T19:37:00.120

Link: CVE-2026-9565

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-27T10:04:18Z

Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')