CVE-2026-8235 Overview
CVE-2026-8235 is an OS command injection vulnerability [CWE-77] affecting 8421bit MiniClaw versions 0.8.0 and 0.9.0. The flaw resides in the resolveSkillScriptPath function within src/kernel.ts, which is part of the System Command Handler component. Attackers with low privileges on an adjacent network can manipulate input to inject operating system commands. The exploit code is publicly disclosed, increasing the likelihood of opportunistic abuse. The maintainer published a fix in commit 223c16a1088e138838dcbd18cd65a37c35ac5a84. Applying this patch resolves the issue.
Critical Impact
Authenticated adjacent-network attackers can execute arbitrary OS commands through the resolveSkillScriptPath function, potentially compromising the host running MiniClaw.
Affected Products
- 8421bit MiniClaw 0.8.0
- 8421bit MiniClaw 0.9.0
- Component: System Command Handler (src/kernel.ts)
Discovery Timeline
- 2026-05-10 - CVE-2026-8235 published to NVD
- 2026-05-13 - Last updated in NVD database
Technical Details for CVE-2026-8235
Vulnerability Analysis
The vulnerability exists in the resolveSkillScriptPath function of src/kernel.ts in 8421bit MiniClaw. This function is part of the System Command Handler that resolves and executes skill script paths. Improper neutralization of special elements used in an OS command [CWE-77] allows attacker-controlled input to be passed into a shell context. When MiniClaw constructs and invokes a command using untrusted path data, an attacker can append or substitute shell metacharacters to execute arbitrary commands under the privileges of the MiniClaw process.
Public disclosure includes both the upstream issue and a corresponding pull request, meaning exploitation details are accessible to anyone reviewing the project's GitHub history. The vulnerability requires the attacker to be authenticated with low privileges and to reach the service from an adjacent network segment.
Root Cause
The root cause is insufficient sanitization of skill script path inputs before they are incorporated into an OS command. The resolveSkillScriptPath function does not strictly validate or escape characters such as ;, |, &, or backticks that have special meaning to the underlying shell. Any input flowing into this resolver becomes an injection sink.
Attack Vector
Exploitation requires adjacent-network access and low-privilege authentication to MiniClaw. An attacker submits a crafted skill script path containing shell metacharacters. When resolveSkillScriptPath processes the input and the kernel hands it to a system command, the injected payload executes on the host. The vulnerability mechanism and patched implementation are documented in the upstream GitHub MiniClaw Commit and the GitHub MiniClaw Issue Report.
Detection Methods for CVE-2026-8235
Indicators of Compromise
- Unexpected child processes spawned by the MiniClaw Node.js runtime, particularly shells such as sh, bash, or cmd.exe.
- Skill script path values in MiniClaw logs containing shell metacharacters (;, |, &&, backticks, $()).
- Outbound network connections from the MiniClaw host to unfamiliar destinations shortly after skill resolution events.
Detection Strategies
- Audit MiniClaw application logs for calls to resolveSkillScriptPath with anomalous or non-ASCII path values.
- Monitor the process tree for the MiniClaw service and alert on any descendant process that is not an expected script interpreter.
- Inspect filesystem changes under user-writable directories invoked through skill scripts to detect post-exploitation staging.
Monitoring Recommendations
- Forward MiniClaw stdout/stderr and host process telemetry to a centralized log platform for correlation.
- Track authentication events on adjacent-network interfaces exposing MiniClaw and rate-limit repeated low-privilege sessions.
- Add file integrity monitoring on src/kernel.ts and related skill-handling modules to detect tampering.
How to Mitigate CVE-2026-8235
Immediate Actions Required
- Upgrade to a MiniClaw build that includes commit 223c16a1088e138838dcbd18cd65a37c35ac5a84 or later.
- Restrict network reachability of MiniClaw so only trusted hosts on the adjacent segment can authenticate.
- Review existing user accounts and revoke unnecessary low-privilege access to the MiniClaw service.
Patch Information
The maintainer fixed the issue in commit 223c16a1088e138838dcbd18cd65a37c35ac5a84, merged through the upstream GitHub MiniClaw Pull Request. Operators running 0.8.0 or 0.9.0 should rebuild from the patched source available in the GitHub MiniClaw Repository. Additional tracking is available at VulDB #362455.
Workarounds
- Disable or remove the skill script execution feature until the patched version is deployed.
- Run MiniClaw under a dedicated low-privilege service account with no shell access and restricted filesystem permissions.
- Place MiniClaw behind a reverse proxy that strips shell metacharacters from request parameters routed to the kernel.
# Configuration example
# Pull the patched MiniClaw source and rebuild
git clone https://github.com/8421bit/MiniClaw.git
cd MiniClaw
git checkout 223c16a1088e138838dcbd18cd65a37c35ac5a84
npm install
npm run build
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
