GHSA-2cq5-mf3v-mx44: OpenClaw: busybox and toybox applet execution weakened exec approval binding

April 17, 2026

busybox and toybox applet execution weakened exec approval binding.

References

github.com/advisories/GHSA-2cq5-mf3v-mx44
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/666f48d9b882a8a1415ca53f9567c72499d850c9
github.com/openclaw/openclaw/pull/65713
github.com/openclaw/openclaw/security/advisories/GHSA-2cq5-mf3v-mx44

Code Behaviors & Features

Detect and mitigate GHSA-2cq5-mf3v-mx44 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →