CVE-2026-36045: picoclaw is vulnerable to OS command injection via the ExecTool component

May 27, 2026 (updated July 1, 2026)

picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go). The guardCommand() function attempts to restrict shell command execution using a denylist of 8 regular expressions, but the denylist is incomplete.

References

gist.github.com/NucleiAv/41899be6266a9813840301577792ed68
github.com/advisories/GHSA-cv2p-68f4-f4pw
github.com/sipeed/picoclaw/commit/01d694b9985a66c3d7119fc9f74ce8ed4f0f21b5
github.com/sipeed/picoclaw/releases/tag/v0.1.2
nvd.nist.gov/vuln/detail/CVE-2026-36045

Code Behaviors & Features

Detect and mitigate CVE-2026-36045 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →