Safestclaw
Monthly
Incomplete shell command blacklist validation in SafestClaw up to version 4.2.4 allows a local low-privilege attacker to bypass the ShellAction._validate_command restriction in the Built-in Web Interface, potentially executing unintended shell commands. A proof-of-concept has been publicly disclosed via GitHub issue #59, though the project maintainer actively disputes that the disclosed exploit demonstrates any concrete user-facing threat, noting the AI-generated POC fails to show actual harm and that the open-source codebase allows operators to customize or remove the allow list. No public exploit has been confirmed in CISA KEV, and the CVSS 4.0 base score of 1.9 reflects the minimal assessed real-world impact.
Incomplete shell command blacklist validation in SafestClaw up to version 4.2.4 allows a local low-privilege attacker to bypass the ShellAction._validate_command restriction in the Built-in Web Interface, potentially executing unintended shell commands. A proof-of-concept has been publicly disclosed via GitHub issue #59, though the project maintainer actively disputes that the disclosed exploit demonstrates any concrete user-facing threat, noting the AI-generated POC fails to show actual harm and that the open-source codebase allows operators to customize or remove the allow list. No public exploit has been confirmed in CISA KEV, and the CVSS 4.0 base score of 1.9 reflects the minimal assessed real-world impact.