By weakness (CWE)

CWE-426: related vulnerabilities

CVEs classified under CWE-426. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

16 published vulnerabilities

• CVE-2026-53819HIGH 8.8

  OpenClaw versions before 2026.5.27 allow attackers to execute arbitrary code on systems during the skill installation process. The vulnerability exists because workspace configuration files (.env) can be manipulated to point to malicious Homebrew-compatible executables. An attacker who has access to a trusted operator workspace can exploit this during skill setup to run unintended commands with the privileges of the OpenClaw process, effectively taking control of the system.

• CVE-2026-11400HIGH 8.0

  A privilege escalation flaw exists in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL. An authenticated user with low privileges can exploit an untrusted search path to run malicious code that escalates their access level to match any other database user, potentially gaining superuser rights. The attack requires the victim to connect to the cluster through the affected wrapper, making it a realistic threat in environments where multiple database users operate through the same wrapper instance.

• CVE-2026-11401HIGH 8.0

  A privilege escalation flaw exists in the AWS Advanced Go Wrapper used to connect to Amazon Aurora PostgreSQL databases. A low-privileged, authenticated database user can craft a malicious function that executes when another user connects through the wrapper, allowing them to assume that user's privileges—potentially including rds_superuser access. This requires the attacker to have database credentials and user interaction (such as a targeted user initiating a connection), but once triggered, it grants near-complete database control to an unauthorized actor.

• CVE-2026-24064HIGH 7.8

  Waves Central for macOS has a serious local privilege escalation flaw in versions 13.0.9 through 16.5.5. An attacker with access to a user account on an affected Mac can inject malicious code into a trusted Waves process by manipulating how the system loads libraries, then escalate to root privileges. This vulnerability is fixed in version 16.6.2 and should be treated as urgent by any organization running Waves audio production software on macOS.

• CVE-2026-46710HIGH 7.8

  Notepad++ versions 8.9.4 through 8.9.6 contain a local privilege escalation flaw in the Windows installer. The installer runs PowerShell without specifying a full file path after changing to a custom installation directory. An attacker who can place a fake powershell.exe in a user-writable directory could trick a privileged user into running the malicious executable during installation, granting it administrator-level access. The vulnerability has been resolved in version 8.9.6.

• CVE-2026-48565HIGH 7.8

  Windows Narrator Braille, Microsoft's screen reader accessibility tool, contains a privilege escalation vulnerability that allows a user with local access to run code with elevated system permissions. The flaw stems from how the application searches for libraries or modules, loading them from untrusted paths—a classic 'DLL search order' weakness. An attacker who already has a login on the system can exploit this during normal use to gain administrative control without user interaction.

• CVE-2026-57919HIGH 7.8

  A privilege escalation vulnerability exists in Matrix42 Empirum's backup component (PBackupVSS.exe). The application creates a shared communication channel (named pipe) that allows any user logged into the system to send commands to it. An attacker with a basic user account can exploit this to run commands with the highest system privileges, potentially compromising the entire machine. The attack works by placing a malicious file in a directory that the backup process searches through during normal operation.

• CVE-2026-6901HIGH 7.7

  A vulnerability in B&R Industrial Automation's APROL platform allows an attacker with local access to manipulate the application's search path and load malicious files. Because APROL searches for libraries in directories controlled by an attacker before checking trusted system locations, an adversary can place a compromised library in a predictable location and trick the application into executing it. This compromises both the confidentiality and integrity of systems running the vulnerable software.

• CVE-2026-49145HIGH 7.5

  App::Ack, a popular code-search tool for Perl developers, has a vulnerability in how it handles configuration files. When developers clone or use a project containing a malicious .ackrc configuration file, the tool can be tricked into reading and processing arbitrary files on the system—even those outside the project directory. This happens because the security blocklist that prevents dangerous options in project-level configs is incomplete. An attacker who commits a crafted .ackrc to a repository can exploit this to extract sensitive file contents when other developers run ack.

• CVE-2026-53842HIGH 7.1

  OpenClaw versions before 2026.5.2 contain a flaw that allows attackers with repository access to inject malicious environment variables into workspace configuration files. When users run Gmail setup commands through gcloud, the tool may be tricked into using an attacker-controlled Python interpreter instead of the legitimate one, potentially leading to arbitrary code execution on the developer's machine. The vulnerability requires user interaction (a developer running the setup process) but no special system privileges.

• CVE-2026-53846HIGH 7.1

  OpenClaw before version 2026.4.29 contains a vulnerability that allows attackers to hijack the package manager used during dependency installation. An attacker with access to a workspace can craft a malicious .env file that tricks the install process into running an unauthorized package manager executable. This could enable them to inject malicious code into the build environment and compromise software artifacts.

• CVE-2026-53858HIGH 7.1

  OpenClaw versions before 2026.5.2 contain a vulnerability that allows attackers to manipulate how the application loads software dependencies. By controlling an environment variable called STATE_DIRECTORY in a workspace configuration file, an attacker can trick OpenClaw into loading malicious code from attacker-controlled locations on the same computer. This attack requires local access and user interaction (such as a developer opening a project), but if successful, it can lead to arbitrary code execution during the dependency resolution process.

• CVE-2026-53865HIGH 7.1

  OpenClaw versions before 2026.5.2 contain a vulnerability that allows a local attacker with user-level access to execute arbitrary executables on the system. The flaw exists in how the maintenance task system handles file paths: an attacker can manipulate workspace-derived environment paths to trick the system into running their chosen command instead of the intended maintenance cleanup utility. This gives an attacker the ability to run code with the privileges of the OpenClaw process during routine maintenance operations.

• CVE-2026-47648HIGH 7.0

  CVE-2026-47648 is a privilege escalation vulnerability in Windows Storage that affects multiple versions of Windows 10, Windows 11, and Windows Server. An authorized local user can exploit an untrusted search path flaw to gain elevated privileges on a compromised system. The vulnerability requires local access and user interaction is not needed, but exploitation depends on specific system conditions. With a CVSS score of 7.0 (HIGH), this poses a meaningful risk to environments where local account compromise is plausible.

• CVE-2026-45792MEDIUM 5.5

  RTK (Rust Token Killer), a tool that filters and compresses command outputs for large language models, contains a configuration trust vulnerability in versions before 0.32.0. An attacker who gains write access to a repository can place a malicious filter configuration file (.rtk/filters.toml) that automatically loads with highest priority, allowing them to silently modify or suppress command outputs—such as file contents, code diffs, or security scan results—before they reach an LLM. This could enable concealment of malicious code during AI-assisted code review or development workflows without the developer's knowledge.

• CVE-2026-54055MEDIUM 5.0

  Kitty, a popular GPU-accelerated terminal emulator, contains a local privilege escalation flaw in its file transmission protocol affecting versions before 0.47.2. A low-privileged user running a child process in the terminal can write files to arbitrary locations on the system by exploiting a race condition in how Kitty validates and creates files. An attacker would need local access and user interaction, but the window for exploitation is small and doesn't require special privileges to trigger.