CVE-2026-8235
Published: Sun, 10 May 2026 07:16
Summary
A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation
Details
A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. The exploit is now public and may be used. The patch is identified as 223c16a1088e138838dcbd18cd65a37c35ac5a84. It is best practice to apply a patch to resolve this issue.
Are YOU affected by CVE-2026-8235?
5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether CVE-2026-8235 (and any other live CVE) applies. Anonymous, no signup.
curl https://mindsparkstack.com/scan.sh | bash
References
- https://github.com/8421bit/MiniClaw/
- https://github.com/8421bit/MiniClaw/commit/223c16a1088e138838dcbd18cd65a37c35ac5a84
- https://github.com/8421bit/MiniClaw/issues/6
- https://github.com/8421bit/MiniClaw/issues/6#issue-4290453729
- https://github.com/8421bit/MiniClaw/pull/7
- https://vuldb.com/submit/809001
- https://vuldb.com/vuln/362455
- https://vuldb.com/vuln/362455/cti
- https://github.com/8421bit/MiniClaw/issues/6
StackPatch runs this match against YOUR installed packages every hour
Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.