CVE-2026-32977

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move operation. An attacker can exploit a time-of-check-time-of-use race condition by modifying parent paths inside the sandbox...

CVE-2026-32977: Time-of-check Time-of-use (TOCTOU) Race Condition

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move operation. An attacker can exploit a time-of-check-time-of-use race condition by modifying parent paths inside the sandbox...

CVE-2026-32988: Time-of-check Time-of-use (TOCTOU) Race Condition

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a verified parent directory. Attackers can exploit a race condition in parent-path alias changes to write attacker-controlled bytes...

CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

AZL-81254 CVE-2026-21716 affecting package nodejs24 for versions less than 24.14.1-1

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

The vulnerability of the hfs_write inode() function in the fs/hfs/inode.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the hfswrite inode function in the fs/hfs/inode.c module of the Linux file system is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1495)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1495 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix null-deref in aggdequeue CVE-2025-40083 In the Linux kernel, the following vulnerability has been...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix null-deref in aggdequeue CVE-2025-40083 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgrouplist in btrfsaddqgrouprelation CVE-2025-40209 In t...

The vulnerability of the btrfs_can_activate_zone() function in the fs/btrfs/zoned.c module of the Linux kernel file system allows a malicious actor to cause a service failure.

The vulnerability of the btrfscanactivatezone function in the fs/btrfs/zoned.c module of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via FileHandle.chmod or FileHandle.chown functions which can use a "read-only" file descriptor to change the owner and permissions of a file. Notes: - This is only exploitable for users using the experimental...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the fs.realpathSync.native function. An attacker running malicious code within a restricted Node.js environment where --allow-fs-read is intentionally limited can exploit this missing check to verify file...

The vulnerability of the `zonefs_i_size_write()` function in the `fs/zonefs/super.c` module of the Linux file system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the zonefsisizewrite function in the fs/zonefs/super.c module of the Linux file system support module involves exposing confidential information. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause service failures...

The vulnerability of the cifs_flock() function in the fs/cifs/file.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the cifsflock function in the fs/cifs/file.c module of the Linux kernel file system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel security update

3.10.0-1160.119.1.0.19 - ext4: fix use-after-free in ext4orphancleanup CVE-2022-50673 Orabug: 39036029 - Squashfs: check return result of sbminblocksize CVE-2025-38415 Orabug: 39036029 - atm: clip: Fix infinite recursive call of clippush. CVE-2025-38459 Orabug: 39036029 - usb: core: config: Preve...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.6.2) +1876 more potentially affected by unknown CVE via tokio-fs (>=0.1.7, <=0.2.0-alpha.6)

tokio-fs CARGO version =0.1.7, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0 - actix-multipart-rfc7578 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0061...

RUSTSEC-2026-0061 `tokio-fs` is unmaintained

The tokio-fs crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

`tokio-fs` is unmaintained

The tokio-fs crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

BIT-CEPH-2025-52555 CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...

AZL-80523 CVE-2026-33056 affecting package trident for versions less than 0.22.0-1

tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpackdir function uses fs::metadata to check whether a path that already exists is a directory. Because fs::metadata follows symbolic links, a crafted tarball...

AZL-83037 CVE-2026-33056 affecting package clamav for versions less than 1.5.2-2

tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpackdir function uses fs::metadata to check whether a path that already exists is a directory. Because fs::metadata follows symbolic links, a crafted tarball...