Cve-2026-32971 — CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/cve-2026-32971/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 31 Mar 2026 12:17:43 +0000OpenClaw Approval Integrity Vulnerability Leads to Code Execution (CVE-2026-32971)https://feed.craftedsignal.io/briefs/2026-04-openclaw-code-execution/Tue, 31 Mar 2026 12:17:43 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-04-openclaw-code-execution/OpenClaw before 2026.3.11 exhibits an approval-integrity vulnerability where attackers can place wrapper binaries to execute local code after operators approve misleading command text, due to the system displaying extracted shell payloads instead of the actual executed arguments.OpenClaw, a software platform (details unspecified in the source), is vulnerable to an approval-integrity issue (CVE-2026-32971) affecting versions prior to 2026.3.11. This vulnerability resides within the node-host system.run approval process. The system displays extracted shell payloads instead of the actual arguments (argv) that will be executed. An attacker can exploit this by crafting malicious commands using wrapper binaries. By inducing operators to approve what appears to be benign…

]]>highadvisorycve-2026-32971code-executionapproval-bypass