Approved changes feed: RSS · Atom
cpe:2.3:a:founddream:miniclawd:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Founddream (fa83ac49-8a2b-59fc-abcb-6d321fb9e05d) |
|---|---|
| Product | Miniclawd (6ae188ea-2d8a-5a6e-b61c-3b40d83fa3b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9453 |
vulnerable | 2026-06-08 08:08:58.974156 |
FoundDream miniclawd SkillsLoader skills-loader.ts which command injection
HIGH (7.3)
A vulnerability was detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. This affects the function which of the file /src/application/skills-loader.ts of the component SkillsLoader. Performing a manipulation of the argument requires.bins results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-25T11:15:11.090Z
Updated: 2026-05-26T15:59:23.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9452 |
vulnerable | 2026-06-08 08:08:58.973839 |
FoundDream miniclawd exec.ts ExecTool.execute os command injection
HIGH (7.3)
A security vulnerability has been detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. Affected by this issue is the function ExecTool.execute of the file /src/tools/exec.ts. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-25T11:00:17.219Z
Updated: 2026-05-29T17:20:51.340Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.