EUVD-2026-31668
GHSA-5pqf-2j34-6h89
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
A security vulnerability has been detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. Affected by this issue is the function ExecTool.execute of the file /src/tools/exec.ts. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
OS command injection in FoundDream miniclawd allows remote unauthenticated attackers to execute arbitrary system commands via the ExecTool.execute function in /src/tools/exec.ts. All versions up to commit 2d65665046e2222eeea76cafc8570ed546a8c125 are affected, and because the project uses no versioning scheme, the full exposure window cannot be bounded by a release number. A publicly available proof-of-concept exploit exists (disclosed via GitHub issue), and the project maintainer has not responded to the responsible disclosure, meaning no patch is available at time of analysis.
Technical ContextAI
The vulnerability resides in the ExecTool.execute function within /src/tools/exec.ts of the miniclawd project (CPE: cpe:2.3:a:founddream:miniclawd:*:*:*:*:*:*:*:*), which appears to be a TypeScript-based tool-execution layer. CWE-78 (Improper Neutralization of Special Elements used in an OS Command) indicates that user-supplied or externally influenced input is passed to a system shell call - such as Node.js child_process.exec or similar - without adequate sanitization or parameterization. This class of flaw arises when command arguments are constructed via string concatenation rather than using safe APIs that separate command from argument (e.g., execFile with argument arrays). The CVSS 4.0 vector confirms no attack prerequisites beyond network reachability: AV:N/AC:L/AT:N/PR:N/UI:N, meaning the vulnerable code path is reachable without authentication, special configuration, or user interaction.
RemediationAI
No vendor-released patch has been identified at time of analysis - the project maintainer was notified via a GitHub issue (https://github.com/FoundDream/miniclawd/issues/1) but has not responded. Organizations running miniclawd should treat this as an unpatched vulnerability requiring compensating controls. The most effective immediate control is to restrict network access to the miniclawd service at the firewall or reverse proxy layer, limiting reachability to trusted IP ranges only - this directly addresses the AV:N attack vector. If the ExecTool functionality is not required for current use cases, disabling or removing the exec.ts module from the deployment eliminates the vulnerable code path entirely, though this may break dependent features. Deploying the service within a container or restricted OS user context (e.g., minimal-privilege Linux user, read-only filesystem where possible) would limit the blast radius of successful command injection by constraining what commands the injected payload can execute. Monitor the upstream repository at https://github.com/FoundDream/miniclawd/ for any patch commits, and consider forking and applying a local fix by refactoring ExecTool.execute to use parameterized command execution rather than string interpolation.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today