# CWE-184.

Every Advisory and CVE whose sources give the weakness CWE-184, newest first.

## Records, newest first (an older page)

- [OpenClaw: Exec allowlist could miss side effects from transparent command wrappers](https://agentprime.io/advisories/GHSA-cwpp-5962-q4f6.md)
  `GHSA-cwpp-5962-q4f6`, `CVE-2026-53848` · npm `openclaw`: affected `<2026.5.26`, fixed in `2026.5.26` · CVSS 2.3 Low · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection, CWE-184
- [OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags](https://agentprime.io/advisories/GHSA-c226-q6fx-6j6c.md)
  `GHSA-c226-q6fx-6j6c`, `CVE-2026-53861` · npm `openclaw`: affected `<2026.5.6`, fixed in `2026.5.6` · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-184
- [npm PraisonAI codeMode sandbox escape via Function constructor](https://agentprime.io/advisories/GHSA-vmmj-pfw7-fjwp.md)
  `GHSA-vmmj-pfw7-fjwp`, `CVE-2026-57138` · npm `praisonai`: affected `>=1.4.0, <1.7.2`, fixed in `1.7.2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-184, CWE-693
- [OpenClaw: Shell inline-command parsing could miss an allowlist check](https://agentprime.io/advisories/GHSA-f397-5vjw-v2c2.md)
  `GHSA-f397-5vjw-v2c2`, `CVE-2026-53866` · npm `openclaw`: affected `<2026.5.12`, fixed in `2026.5.12` · CVSS 7.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: Broken access control, CWE-184
- [OpenClaw: Host environment sanitizer missed two Node.js control variables](https://agentprime.io/advisories/GHSA-ccwh-wwpp-6wg5.md)
  `GHSA-ccwh-wwpp-6wg5`, `CVE-2026-53864` · npm `openclaw`: affected `<2026.5.26`, fixed in `2026.5.26` · CVSS 7.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-184
- [Duplicate Advisory: PickleScan's profile.run blocklist mismatch allows exec() bypass](https://agentprime.io/advisories/GHSA-4mpj-78p6-rj59.md)
  `GHSA-4mpj-78p6-rj59` · PyPI `picklescan`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-184
- [Duplicate Advisory: Picklescan does not block ctypes](https://agentprime.io/advisories/GHSA-7f79-rvx6-vxc4.md)
  `GHSA-7f79-rvx6-vxc4` · PyPI `picklescan`: affected `<0.0.33`, fixed in `0.0.33` · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-184
- [Duplicate Advisory: Picklescan has Incomplete List of Disallowed Inputs](https://agentprime.io/advisories/GHSA-6v84-v468-3c7f.md)
  `GHSA-6v84-v468-3c7f` · PyPI `picklescan`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-184
- [OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution](https://agentprime.io/advisories/CVE-2026-55743.md)
  `CVE-2026-55743` · CVE record: tinyhumansai OpenHuman · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2026 · Tags: Command injection, CWE-184
- [n8n: Python Code Node AST Validator Bypass](https://agentprime.io/advisories/GHSA-jwm3-qcfw-c5pp.md)
  `GHSA-jwm3-qcfw-c5pp`, `CVE-2026-56777` · npm `n8n`: affected `<2.25.7 || >=2.26.0, <2.26.2`, fixed in `2.25.7`, `2.26.2` · CVSS 5.3 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-184, CWE-693
- [Duplicate Advisory: Host environment sanitizer missed two Node.js control variables](https://agentprime.io/advisories/GHSA-vr6h-vxqj-3pjx.md)
  `GHSA-vr6h-vxqj-3pjx` · npm `openclaw`: affected `<=2026.5.22`, no fixed version yet · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-184
- [Duplicate Advisory: macOS Swift exec allowlist missed combined POSIX inline flags](https://agentprime.io/advisories/GHSA-g796-jqmx-wf9q.md)
  `GHSA-g796-jqmx-wf9q` · npm `openclaw`: affected `<=2026.5.5`, no fixed version yet · CVSS 6.6 Medium · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-184
- [Duplicate Advisory: Shell positional parameters could weaken strict inline-eval checks](https://agentprime.io/advisories/GHSA-27pq-2ph8-8x25.md)
  `GHSA-27pq-2ph8-8x25` · npm `openclaw`: affected `*`, no fixed version yet · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-184
- [Duplicate Advisory: Exec allowlist could miss side effects from transparent command wrappers](https://agentprime.io/advisories/GHSA-wrr6-p5r6-474m.md)
  `GHSA-wrr6-p5r6-474m` · npm `openclaw`: affected `<=2026.5.22`, no fixed version yet · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-184
- [Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output](https://agentprime.io/advisories/GHSA-8rfp-98v4-mmr6.md)
  `GHSA-8rfp-98v4-mmr6` · PyPI `bleach`: affected `<6.4.0`, fixed in `6.4.0` · CVSS 0.0 None · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-184
- [Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient](https://agentprime.io/advisories/GHSA-38cx-cq6f-5755.md)
  `GHSA-38cx-cq6f-5755`, `CVE-2026-48736`, `PKSA-35by-yxtt-jc85`, `PKSA-bd71-n14y-wh1d`, `PKSA-y6py-qpv1-h52p` · Packagist `symfony/http-client` and 2 more: affected `>=5.4.0, <5.4.53`, fixed in `5.4.53` · CVSS 6.9 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Duplicate Advisory: OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks](https://agentprime.io/advisories/GHSA-ffhm-8fwq-7q27.md)
  `GHSA-ffhm-8fwq-7q27` · npm `openclaw`: affected `<2026.5.12`, fixed in `2026.5.12` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 13 Jun 2026 · Tags: CWE-184
- [File Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection](https://agentprime.io/advisories/GHSA-8c9q-7855-wfxq.md)
  `GHSA-8c9q-7855-wfxq`, `CVE-2026-54090`, `GO-2026-5250` · Go `github.com/filebrowser/filebrowser/v2`: affected `<2.33.8`, fixed in `2.33.8` · CVSS 8.7 High · Not analysed yet · Published 12 Jun 2026 · Tags: Command injection, CWE-184
- [Spatie Laravel Media Library contains a file upload restriction bypass](https://agentprime.io/advisories/GHSA-3ggm-c5m7-hfv5.md)
  `GHSA-3ggm-c5m7-hfv5`, `CVE-2026-48557`, `PKSA-mrgr-9pdf-y591` · Packagist `spatie/laravel-medialibrary`: affected `<11.23.0`, fixed in `11.23.0` · CVSS 8.7 High · Not analysed yet · Published 29 May 2026 · Tags: CWE-184
- [FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s\*\\(/ is bypassable](https://agentprime.io/advisories/CVE-2026-44287.md)
  `CVE-2026-44287` · CVE record: labring FastGPT · CVSS 6.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: Code injection, CWE-184
- [Gotenberg has an SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes](https://agentprime.io/advisories/GHSA-86m8-88fq-xfxp.md)
  `GHSA-86m8-88fq-xfxp`, `CVE-2026-45741`, `GO-2026-5244` · Go `github.com/gotenberg/gotenberg/v8`: affected `<=8.32.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 May 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Symfony's HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/cite — \`javascript\`: URI Survives Sanitization (XSS)](https://agentprime.io/advisories/GHSA-hhg7-c65m-h7ff.md)
  `GHSA-hhg7-c65m-h7ff`, `CVE-2026-45753`, `PKSA-kp1y-8sfh-4r87`, `PKSA-q2wy-m7mz-kg58` · Packagist `symfony/html-sanitizer` and 1 more: affected `>=6.1.0, <6.4.40 || >=7.0.0, <7.4.12 || >=8.0.0, <8.0.12`, fixed in `6.4.40`, `7.4.12`, `8.0.12` · CVSS 2.1 Low · Not analysed yet · Published 28 May 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions](https://agentprime.io/advisories/CVE-2026-44463.md)
  `CVE-2026-44463` · CVE record: zed-industries zed · CVSS 8.6 High · Not analysed yet · Published 28 May 2026 · Tags: Command injection, CWE-184
- [Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions](https://agentprime.io/advisories/CVE-2026-44462.md)
  `CVE-2026-44462` · CVE record: zed-industries zed · CVSS 6.4 Medium · Not analysed yet · Published 28 May 2026 · Tags: CWE-184
- [Symfony has an HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and \<area> Misclassification](https://agentprime.io/advisories/GHSA-qc95-4862-92fh.md)
  `GHSA-qc95-4862-92fh`, `CVE-2026-45066`, `PKSA-jwvg-gphd-brbz`, `PKSA-vty3-cvqg-rtn4` · Packagist `symfony/html-sanitizer` and 1 more: affected `>=6.1.0, <6.4.40 || >=7.0.0, <7.4.12 || >=8.0.0, <8.0.12`, fixed in `6.4.40`, `7.4.12`, `8.0.12` · CVSS 2.3 Low · Not analysed yet · Published 27 May 2026 · Tags: CWE-184, CWE-436
- [CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters](https://agentprime.io/advisories/GHSA-7g26-2qgj-chfg.md)
  `GHSA-7g26-2qgj-chfg`, `CVE-2026-44587` · RubyGems `carrierwave`: affected `<2.2.7 || >=3.0.0.beta, <3.1.3`, fixed in `2.2.7`, `3.1.3` · CVSS 4.7 Medium · Not analysed yet · Published 27 May 2026 · Tags: Cross-site scripting (XSS), CWE-116, CWE-184, CWE-625
- [Tabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocation](https://agentprime.io/advisories/CVE-2026-45037.md)
  `CVE-2026-45037` · CVE record: Eugeny tabby · CVSS 7.1 High · Not analysed yet · Published 15 May 2026 · Tags: Open redirect, CWE-184
- [Flowise has an MCP Security Bypass that Enables RCE](https://agentprime.io/advisories/GHSA-m99r-2hxc-cp3q.md)
  `GHSA-m99r-2hxc-cp3q`, `CVE-2026-56274` · npm `flowise` and 1 more: affected `<3.1.2`, fixed in `3.1.2` · CVSS 8.7 High · Not analysed yet · Published 14 May 2026 · Tags: Command injection, CWE-184
- [JunoClaw: plugin-shell shell-injection bypass via substring blocklist](https://agentprime.io/advisories/CVE-2026-43991.md)
  `CVE-2026-43991` · CVE record: Dragonmonk111 junoclaw · CVSS 8.4 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection, CWE-184
- [Gotenberg's ExifTool group-prefix syntax bypasses dangerous-tag blocklist](https://agentprime.io/advisories/GHSA-7v3r-m9c8-r855.md)
  `GHSA-7v3r-m9c8-r855`, `CVE-2026-42590`, `GO-2026-5234` · Go `github.com/gotenberg/gotenberg/v8`: affected `<=8.29.1`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-184
- [Duplicate Advisory: OpenClaw: Exec environment denylist missed high-risk interpreter startup variables](https://agentprime.io/advisories/GHSA-xrgf-r9gr-jjjf.md)
  `GHSA-xrgf-r9gr-jjjf` · npm `openclaw`: affected `<2026.4.10`, fixed in `2026.4.10` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 6 May 2026 · Tags: CWE-184
- [Duplicate Advisory: OpenClaw: Workspace dotenv could override runtime-control environment variables](https://agentprime.io/advisories/GHSA-9r9j-3r2w-fg3v.md)
  `GHSA-9r9j-3r2w-fg3v` · npm `openclaw`: affected `<2026.4.20`, fixed in `2026.4.20` · CVSS 7.8 High · Withdrawn · Not analysed yet · Published 6 May 2026 · Tags: CWE-184
- [Vvveb < 1.0.8.2 Authenticated RCE via Code Editor](https://agentprime.io/advisories/CVE-2026-41934.md)
  `CVE-2026-41934` · CVE record: givanz Vvveb · CVSS 8.7 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-184
- [ssrfcheck Vulnerable to Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs](https://agentprime.io/advisories/GHSA-j4rj-2jr5-m439.md)
  `GHSA-j4rj-2jr5-m439`, `CVE-2026-43929` · npm `ssrfcheck`: affected `<=1.3.0`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes](https://agentprime.io/advisories/GHSA-cwj3-vqpp-pmxr.md)
  `GHSA-cwj3-vqpp-pmxr`, `CVE-2026-45006` · npm `openclaw`: affected `<2026.4.23`, fixed in `2026.4.23` · CVSS 7.7 High · Not analysed yet · Published 5 May 2026 · Tags: Broken access control, CWE-184
- [OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs](https://agentprime.io/advisories/GHSA-x3h8-jrgh-p8jx.md)
  `GHSA-x3h8-jrgh-p8jx`, `CVE-2026-44115` · npm `openclaw`: affected `<2026.4.22`, fixed in `2026.4.22` · CVSS 8.7 High · Not analysed yet · Published 4 May 2026 · Tags: Information disclosure, CWE-184
- [Gotenberg has an ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names that Allows Arbitrary File Rename and Move](https://agentprime.io/advisories/GHSA-62p3-hvxx-fxg4.md)
  `GHSA-62p3-hvxx-fxg4`, `CVE-2026-40893`, `GO-2026-5162` · Go `github.com/gotenberg/gotenberg/v8`: affected `<=8.30.1`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 4 May 2026 · Tags: Path traversal, CWE-20, CWE-184
- [OpenClaw: Workspace dotenv could override runtime-control environment variables](https://agentprime.io/advisories/GHSA-hxvm-xjvf-93f3.md)
  `GHSA-hxvm-xjvf-93f3`, `CVE-2026-44114` · npm `openclaw`: affected `<2026.4.20`, fixed in `2026.4.20` · CVSS 8.5 High · Not analysed yet · Published 25 Apr 2026 · Tags: CWE-184
- [OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy](https://agentprime.io/advisories/GHSA-72q8-jcmc-97wx.md)
  `GHSA-72q8-jcmc-97wx`, `CVE-2026-44993` · npm `openclaw`: affected `<2026.4.20`, fixed in `2026.4.20` · CVSS 2.3 Low · Not analysed yet · Published 25 Apr 2026 · Tags: Broken access control, CWE-184
- [Duplicate Advisory: OpenClaw host-env blocklist missing \`GIT_TEMPLATE_DIR\` and \`AWS_CONFIG_FILE\` allows code execution via env override](https://agentprime.io/advisories/GHSA-wcm7-94wg-h74h.md)
  `GHSA-wcm7-94wg-h74h` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-184
- [Xibo CMS API has SQL Injection via DataSet Filter Parameter](https://agentprime.io/advisories/CVE-2026-31952.md)
  `CVE-2026-31952` · CVE record: xibosignage xibo-cms · CVSS 7.6 High · Not analysed yet · Published 24 Apr 2026 · Tags: SQL injection, CWE-184
- [Xerte Online Toolkits File Upload RCE via elfinder Connector](https://agentprime.io/advisories/CVE-2026-34415.md)
  `CVE-2026-34415` · CVE record: thexerteproject xerteonlinetoolkits · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-184
- [Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-3hjv-c53m-58jj.md)
  `GHSA-3hjv-c53m-58jj`, `CVE-2026-41264` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-184
- [October CMS has Safe Mode Bypass via Twig Database Write Operations](https://agentprime.io/advisories/GHSA-h6jm-f4hh-fw27.md)
  `GHSA-h6jm-f4hh-fw27`, `CVE-2026-26274`, `PKSA-yqc2-m5mr-13xt` · Packagist `october/october`: affected `<3.7.14 || >=4.0.0, <4.1.10`, fixed in `3.7.14`, `4.1.10` · CVSS 6.6 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: Broken access control, CWE-184
- [October CMS has Safe Mode Bypass via CSS Preprocessor Compilers](https://agentprime.io/advisories/GHSA-3888-q23f-x7qh.md)
  `GHSA-3888-q23f-x7qh`, `CVE-2026-26067`, `PKSA-4k1j-qzgm-rvr3` · Packagist `october/system`: affected `<3.7.14 || >=4.0.0, <4.1.10`, fixed in `3.7.14`, `4.1.10` · CVSS 4.9 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: Path traversal, Information disclosure, Broken access control, CWE-184
- [OpenMage LTS has a Path Traversal Filter Bypass in Dataflow Module](https://agentprime.io/advisories/GHSA-6vqf-6fhm-7rc6.md)
  `GHSA-6vqf-6fhm-7rc6`, `CVE-2026-25525`, `PKSA-t8bb-kchx-xyxb` · Packagist `openmage/magento-lts`: affected `<20.17.0`, fixed in `20.17.0` · CVSS 4.9 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: Path traversal, CWE-184
- [Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-v38x-c887-992f.md)
  `GHSA-v38x-c887-992f`, `CVE-2026-41265` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Apr 2026 · Tags: Command injection, CWE-184
- [OpenClaw: Discord event cover images bypassed sandbox media normalization](https://agentprime.io/advisories/GHSA-c9h3-5p7r-mrjh.md)
  `GHSA-c9h3-5p7r-mrjh`, `CVE-2026-43532` · npm `openclaw`: affected `>=2026.4.7, <2026.4.10`, fixed in `2026.4.10` · CVSS 4.9 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Path traversal, CWE-184
- [OpenClaw: Exec environment denylist missed high-risk interpreter startup variables](https://agentprime.io/advisories/GHSA-vfp4-8x56-j7c5.md)
  `GHSA-vfp4-8x56-j7c5`, `CVE-2026-43584` · npm `openclaw`: affected `<2026.4.10`, fixed in `2026.4.10` · CVSS 8.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-184
- [OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms](https://agentprime.io/advisories/GHSA-j6c7-3h5x-99g9.md)
  `GHSA-j6c7-3h5x-99g9`, `CVE-2026-42435` · npm `openclaw`: affected `>=2026.2.22, <2026.4.12`, fixed in `2026.4.12` · CVSS 8.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection, CWE-184
- [OpenClaw: Heartbeat owner downgrade missed local async exec completion events](https://agentprime.io/advisories/GHSA-g375-h3v6-4873.md)
  `GHSA-g375-h3v6-4873`, `CVE-2026-43578` · npm `openclaw`: affected `>=2026.3.31, <2026.4.10`, fixed in `2026.4.10` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: Privilege escalation, CWE-184
- [OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events](https://agentprime.io/advisories/GHSA-g2hm-779g-vm32.md)
  `GHSA-g2hm-779g-vm32`, `CVE-2026-43566` · npm `openclaw`: affected `>=2026.4.7, <2026.4.14`, fixed in `2026.4.14` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: Broken access control, CWE-184
- [PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code](https://agentprime.io/advisories/GHSA-vp22-38m5-r39r.md)
  `GHSA-vp22-38m5-r39r`, `CVE-2026-41206`, `PYSEC-2026-3031` · PyPI `pyspector`: affected `<0.1.8`, fixed in `0.1.8` · CVSS 6.9 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-184
- [Kimai leaks API Token Hash via Invoice Twig Template](https://agentprime.io/advisories/GHSA-rh42-6rj2-xwmc.md)
  `GHSA-rh42-6rj2-xwmc`, `CVE-2026-80201`, `PKSA-k88g-1gqq-x96c` · Packagist `kimai/kimai`: affected `<2.53.0`, fixed in `2.53.0` · CVSS 2.0 Low · Not analysed yet · Published 14 Apr 2026 · Tags: Code injection, CWE-184
- [LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf](https://agentprime.io/advisories/GHSA-fm2x-c5qw-4h6f.md)
  `GHSA-fm2x-c5qw-4h6f`, `CVE-2026-34177`, `GO-2026-5368` · Go `github.com/canonical/lxd`: affected `>=0.0.0-20210305023314-538ac3df036e, <=0.0.0-20260226085519-736f34afb267`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-184
- [Beszel has an IDOR in hub API endpoints that read system ID from URL parameter](https://agentprime.io/advisories/GHSA-5f5r-95pg-xrpm.md)
  `GHSA-5f5r-95pg-xrpm`, `CVE-2026-40077`, `GO-2026-5141` · Go `github.com/henrygd/beszel`: affected `<0.18.7`, fixed in `0.18.7` · CVSS 3.5 Low · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-184
- [OpenClaw: GIT_DIR and related git plumbing env vars missing from exec env denylist (GHSA-m866-6qv5-p2fg variant)](https://agentprime.io/advisories/GHSA-cm8v-2vh9-cxf3.md)
  `GHSA-cm8v-2vh9-cxf3`, `CVE-2026-41915` · npm `openclaw`: affected `<2026.4.8`, fixed in `2026.4.8` · CVSS 5.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Command injection, CWE-184
- [Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()](https://agentprime.io/advisories/GHSA-95h2-gj7x-gx9w.md)
  `GHSA-95h2-gj7x-gx9w`, `CVE-2026-39315` · npm `unhead`: affected `<2.1.13`, fixed in `2.1.13` · CVSS 6.1 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-184
- [OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)](https://agentprime.io/advisories/GHSA-7437-7hg8-frrw.md)
  `GHSA-7437-7hg8-frrw`, `CVE-2026-42427` · npm `openclaw`: affected `<2026.4.8`, fixed in `2026.4.8` · CVSS 5.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Command injection, CWE-184
- [OpenClaw: Windows-compatible env override keys could bypass system.run approval binding](https://agentprime.io/advisories/GHSA-98ch-45wp-ch47.md)
  `GHSA-98ch-45wp-ch47`, `CVE-2026-34426`, `CVE-2026-34510`, `GHSA-h3x4-hc5v-v2gm` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 6.9 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-41, CWE-178, CWE-184

Newest: <https://agentprime.io/advisories/tag/cwe-184.md>
Older: <https://agentprime.io/advisories/tag/cwe-184.md?cursor=WyIyMDI2LTA0LTA3VDE4OjE1OjQ4LjAwMDAwMFoiLCJHSFNBLTk4Y2gtNDV3cC1jaDQ3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-184&cursor=WyIyMDI2LTA2LTE4VDIwOjEyOjEyLjAwMDAwMFoiLCJHSFNBLTVjajItM2pyMi01aDc3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-184/?cursor=WyIyMDI2LTA2LTE4VDIwOjEyOjEyLjAwMDAwMFoiLCJHSFNBLTVjajItM2pyMi01aDc3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.