CWE-15 External Control of System or Configuration Setting
Description
One or more system settings or configuration elements can be externally controlled by a user.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-15 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-5cph-wvm9-45gj | CVE-2024-58351 | HIGH |
Flowise OverrideConfig security vulnerability |
2026-09-14 | |
| GHSA-jv2h-4p9v-wf5w | - | HIGH |
ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys |
2026-06-19 | |
| GHSA-v25v-m36w-jp4h | CVE-2026-45087 | CRITICAL |
Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action` |
2026-06-08 | |
| GHSA-7rc8-5c8q-jr6j | CVE-2025-62527 | HIGH |
Taguette password reset link poisoning |
2026-06-08 | |
| GHSA-rpcf-rmh6-42xr | CVE-2025-8283 | LOW | - |
Netavark Has Possible DNS Resolve Confusion |
2026-06-04 |
| GHSA-h2vw-ph2c-jvwf | CVE-2026-44992 | MODERATE |
OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests |
2026-05-19 | |
| GHSA-7wv4-cc7p-jhxc | CVE-2026-43531 | MODERATE |
OpenClaw: Workspace .env could inject OpenClaw runtime-control variables |
2026-05-08 | |
| GHSA-3qpv-xf3v-mm45 | CVE-2026-41336 | HIGH |
OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code |
2026-05-06 | |
| GHSA-qcj9-wwgw-6gm8 | CVE-2026-41396 | HIGH |
OpenClaw: Workspace `.env` can override the bundled plugin trust root |
2026-05-06 | |
| GHSA-vfw7-6rhc-6xxg | CVE-2026-41384 | HIGH |
OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config |
2026-05-06 | |
| GHSA-hwqh-2684-54fc | CVE-2026-22750 | HIGH |
Spring Cloud Gateway's SSL bundle configuration silently bypassed |
2026-04-14 | |
| GHSA-39pp-xp36-q6mg | CVE-2026-35650 | HIGH |
OpenClaw has Inconsistent Host Exec Environment Override Sanitization |
2026-04-10 | |
| GHSA-8fmp-37rc-p5g7 | CVE-2026-22177 | MODERATE |
OpenClaw's config env vars allowed startup env injection into service runtime |
2026-04-08 | |
| GHSA-hjvp-qhm6-wrh2 | CVE-2026-32058 | LOW |
OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows |
2026-03-30 | |
| GHSA-xgf2-vxv2-rrmg | CVE-2026-32056 | HIGH |
OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class) |
2026-03-30 | |
| GHSA-2fgq-7j6h-9rm4 | CVE-2026-32003 | HIGH |
OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE) |
2026-03-30 | |
| GHSA-vmqr-rc7x-3446 | CVE-2026-22169 | MODERATE |
OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints |
2026-03-18 | |
| GHSA-82g8-464f-2mv7 | CVE-2026-4039 | MODERATE |
OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth) |
2026-03-12 | |
| GHSA-9c4h-pwmf-m6fj | CVE-2026-30960 | CRITICAL | - |
RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface |
2026-03-10 |
| GHSA-j425-whc4-4jgc | - | MODERATE |
OpenClaw's `system.run` env override filtering allowed dangerous helper-command pivots |
2026-03-09 | |
| GHSA-w9cg-v44m-4qv8 | - | HIGH |
OpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands |
2026-03-03 | |
| GHSA-5h2c-8v84-qpvr | - | MODERATE |
OpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths |
2026-03-03 | |
| GHSA-97rm-xj73-33jh | CVE-2026-27203 | HIGH |
eBay API MCP Server Affected by Environment Variable Injection |
2026-02-23 | |
| GHSA-fwwp-xcxw-39vq | CVE-2025-24514 | HIGH |
ingress-nginx controller - configuration injection via unsanitized auth-url annotation |
2026-02-04 | |
| GHSA-823x-fv5p-h7hw | CVE-2025-1097 | HIGH |
ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation |
2025-11-03 |