add_new_cves_batch2.json

{
  "_comment": "Proposed new vulnerability entries for openclaw_rules.json — BATCH 2. These 36 CVEs were discovered on 2026-03-25 from the jgamblin/OpenClawCVEs tracker and are NOT in the rules file or the previous add_new_cves.json. Note: affected_ranges for many entries are best-effort based on available data. Entries marked with '_needs_verification': true should be validated against NVD before merging.",
  "new_vulnerabilities": [
    {
      "id": "CVE-2026-28363",
      "title": "tools.exec.safeBins validation for sort could be bypassed",
      "severity": "CRITICAL",
      "fixed_in": null,
      "surface": ["tooling", "sandbox"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28363"]
    },
    {
      "id": "CVE-2026-22172",
      "title": "Scope Elevation in WebSocket Shared-Auth Connections allows self-declaring elevated operator scopes",
      "severity": "CRITICAL",
      "fixed_in": "2026.3.12",
      "surface": ["gateway_ws", "api"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-22172"]
    },
    {
      "id": "CVE-2026-28474",
      "title": "Allowlist Bypass via actor.name Display Name Spoofing",
      "severity": "CRITICAL",
      "fixed_in": null,
      "surface": ["agent_runtime", "tooling"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28474"]
    },
    {
      "id": "CVE-2026-32038",
      "title": "Sandbox Network Isolation Bypass via docker.network configuration",
      "severity": "CRITICAL",
      "fixed_in": null,
      "surface": ["sandbox"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32038"]
    },
    {
      "id": "CVE-2026-28446",
      "title": "Inbound Allowlist Policy Bypass in voice-call Extension",
      "severity": "CRITICAL",
      "fixed_in": null,
      "surface": ["voice_call", "tooling"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28446"]
    },
    {
      "id": "CVE-2026-22171",
      "title": "Path Traversal in Feishu Media Temporary File Naming",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["media_ingestion", "webhook"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-22171"]
    },
    {
      "id": "CVE-2026-32913",
      "title": "fetch-guard forwards custom authorization headers to third-party origins",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["agent_runtime", "fetch_guard"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32913"]
    },
    {
      "id": "CVE-2026-28479",
      "title": "Cache Poisoning via Deprecated SHA-1 Hash in content integrity checks",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["gateway_http"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28479"]
    },
    {
      "id": "CVE-2026-29609",
      "title": "Denial of Service via Unbounded URL-backed Media download causing memory exhaustion",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["gateway_http", "media_ingestion"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-29609"]
    },
    {
      "id": "CVE-2026-28478",
      "title": "Denial of service via unbounded webhook request body parsing",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["gateway_http", "webhook"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28478"]
    },
    {
      "id": "CVE-2026-32060",
      "title": "Path Traversal in apply_patch via Crafted file Paths",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["agent_runtime", "sandbox"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32060"]
    },
    {
      "id": "CVE-2026-32059",
      "title": "Allowlist Bypass via sort Long-Option Abbreviation in safeBins",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["tooling", "sandbox"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32059"]
    },
    {
      "id": "CVE-2026-26323",
      "title": "Command injection in maintainer clawtributors updater script",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["tooling"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-26323"]
    },
    {
      "id": "CVE-2026-28393",
      "title": "Arbitrary JavaScript Module Loading via Hook Transform allows code execution",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["hook_transform", "agent_runtime"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28393"]
    },
    {
      "id": "CVE-2026-28450",
      "title": "Unauthenticated Profile Tampering via Nostr Plugin allowing identity spoofing",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["plugin", "webhook"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28450"]
    },
    {
      "id": "CVE-2026-28453",
      "title": "Zip Slip Path Traversal in TAR Archive Extraction during plugin install",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["plugin", "sandbox"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28453"]
    },
    {
      "id": "CVE-2026-32036",
      "title": "Authentication Bypass via Encoded Dot-Segment Traversal in API routing",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["gateway_http", "api"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32036"]
    },
    {
      "id": "CVE-2026-28392",
      "title": "Privilege Escalation in Slack Slash Command Handler via crafted command payload",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["webhook", "chat_bridge"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28392"]
    },
    {
      "id": "CVE-2026-28469",
      "title": "Google Chat shared-path webhook target ambiguity allows message injection",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["webhook", "chat_bridge"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28469"]
    },
    {
      "id": "CVE-2026-29611",
      "title": "Local File Inclusion via mediaPath parameter in BlueBubbles bridge",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["media_ingestion", "chat_bridge"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-29611"]
    },
    {
      "id": "CVE-2026-32302",
      "title": "Untrusted web origins obtain authenticated operator.admin access via loopback",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["gateway_http", "browser_control"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32302"]
    },
    {
      "id": "CVE-2026-29610",
      "title": "Command Hijacking via Unsafe PATH Handling in tool execution",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["tooling"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-29610"]
    },
    {
      "id": "CVE-2026-32056",
      "title": "Remote Code Execution via Shell Startup Environment variable injection",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["sandbox", "agent_runtime"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32056"]
    },
    {
      "id": "CVE-2026-32005",
      "title": "Slack interactive callbacks could skip sender checks allowing unauthorized actions",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["webhook", "chat_bridge"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32005"]
    },
    {
      "id": "CVE-2026-26316",
      "title": "BlueBubbles webhook auth bypass via loopback proxy forwarding",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["webhook", "chat_bridge"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-26316"]
    },
    {
      "id": "CVE-2026-26321",
      "title": "Local file disclosure via sendMediaFeishu file path parameter",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["media_ingestion", "chat_bridge"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-26321"]
    },
    {
      "id": "CVE-2026-32041",
      "title": "Unauthenticated Browser Control Access via Failed Auth state not being cleared",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["browser_control", "sandbox"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32041"]
    },
    {
      "id": "CVE-2026-28458",
      "title": "Browser Relay /cdp websocket endpoint missing authentication check",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["browser_control", "gateway_ws"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28458"]
    },
    {
      "id": "CVE-2026-32032",
      "title": "Arbitrary Shell Execution via Unvalidated SHELL environment variable",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["sandbox", "agent_runtime"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32032"]
    },
    {
      "id": "CVE-2026-26325",
      "title": "system.run rawCommand/command field mismatch allows guardrail bypass",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["agent_runtime", "tooling"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-26325"]
    },
    {
      "id": "CVE-2026-32055",
      "title": "Workspace Path Boundary Bypass via Non-existent Symlink creation",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["sandbox", "agent_runtime"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-32055"]
    },
    {
      "id": "CVE-2026-22175",
      "title": "Exec Approval Bypass via Unrecognized Multiplexer Shells (tmux, screen)",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["tooling"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-22175"]
    },
    {
      "id": "CVE-2026-22169",
      "title": "Allowlist Bypass via sort Configuration in safeBins allowing file operations",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["tooling", "sandbox"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-22169"]
    },
    {
      "id": "CVE-2026-22168",
      "title": "Command Injection via cmd.exe /c Trailing Arguments on Windows",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["tooling"],
      "requires_auth": true,
      "platform": "windows",
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-22168"]
    },
    {
      "id": "CVE-2026-27522",
      "title": "Arbitrary File Read via sendAttachment and setGroupIcon media operations",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["media_ingestion", "chat_bridge"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-27522"]
    },
    {
      "id": "CVE-2026-28447",
      "title": "Path Traversal in Plugin Installation via crafted Package Name",
      "severity": "HIGH",
      "fixed_in": null,
      "surface": ["plugin"],
      "requires_auth": true,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-28447"]
    },
    {
      "id": "CVE-2026-22178",
      "title": "ReDoS and Regex Injection via Unescaped Feishu webhook input",
      "severity": "MEDIUM",
      "fixed_in": null,
      "surface": ["webhook", "chat_bridge"],
      "requires_auth": false,
      "affected_ranges": [{"lt": "2026.3.12"}],
      "_needs_verification": true,
      "references": ["https://nvd.nist.gov/vuln/detail/CVE-2026-22178"]
    }
  ]
}