12 matches found
OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf
Summary openclaw had a workspace boundary bypass in workspace-only path validation: when an in-workspace symlink pointed outside the workspace to a non-existent leaf, the first write could pass validation and create the file outside the workspace. Affected Packages / Versions - Package: openclaw...
8.2CVSS5.8AI score0.00322EPSS
SaveExploits0References6Affected Software1
20