CVE-2026-43533

creationtimestamp| type| source ---|---|--- 2026-05-05 12:43:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml47mvcgti2h 2026-05-05 17:46:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4qjwkr3s2n 2026-05-06 00:42:46+00:00| seen|...

CVE-2026-43533

OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through...