Exploitation Summary
EIP tracks 1 public exploit for CVE-2026-28363. PoCs published by kaleth4.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2026-28363, targeting OpenClaw's validation bypass via GNU sort command abbreviations. The exploit leverages the incomplete disallowed inputs list to achieve remote code execution (RCE).
Description
In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to approval-free execution paths that were intended to require approval. Only an exact string such as --compress-program was denied.
Exploits (1)
The repository contains a functional exploit for CVE-2026-28363, targeting OpenClaw's validation bypass via GNU sort command abbreviations. The exploit leverages the incomplete disallowed inputs list to achieve remote code execution (RCE).
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H