CVE-2026-9565
haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection
- State
- Published
- Severity
- 5.3 Medium
- Published
- May 26, 2026
- Updated
- May 28, 2026
- Reserved
- May 26, 2026
Description
A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file apps/runtime/src-tauri/src/agent/tools/bash.rs of the component Blacklist Handler. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
WorkClawhaojing8312 |
|
References
- VDB-365627 | haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injectionvdb-entrytechnical-description
- VDB-365627 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #815713 | haojing8312 WorkClaw v0.1.0 - v0.6.3 Incomplete Blacklistthird-party-advisory
- https://github.com/haojing8312/WorkClaw/issues/4exploitissue-tracking
- https://github.com/haojing8312/WorkClaw/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.