CVE-2026-9452

HIGH 7.3

FoundDream miniclawd exec.ts ExecTool.execute os command injection

CVSS Score

7.3

EPSS Score

1.3%

EPSS Percentile

80th

A security vulnerability has been detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. Affected by this issue is the function ExecTool.execute of the file /src/tools/exec.ts. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-78 CWE-77
Vendor	founddream
Product	miniclawd
Published	May 25, 2026
Last Updated	May 29, 2026

Stay Ahead of the Next One

Get instant alerts for founddream miniclawd

Be the first to know when new high vulnerabilities affecting founddream miniclawd are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

FoundDream / miniclawd

2d65665046e2222eeea76cafc8570ed546a8c125

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/365433 vuldb.com: https://vuldb.com/vuln/365433/cti vuldb.com: https://vuldb.com/submit/813767 github.com: https://github.com/FoundDream/miniclawd/issues/1 github.com: https://github.com/FoundDream/miniclawd/

Credits

🔍 ybdesire (VulDB User) VulDB CNA Team