| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| openclaw | < 2026.3.1 | 2026.3.1 |
| openclaw | < 2026.3.1 | 2026.3.1 |
For host=node runs, approvals validated command context but did not pin executable identity for non-path-like argv[0] tokens (for example tr). If PATH resolution changed after approval, execution could run a different binary.
A previously approved action could execute a different executable than the operator approved.
Node system.run approvals now require immutable systemRunPlan data, and path-token commands are pinned to canonical executable identity (realpath) across approval and execution.
<= 2026.2.262026.3.1これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン