Lucene search
+L

12 matches found

OSV
OSV
added 2026/03/12 2:21 p.m.5 views

GHSA-MGRQ-9F93-WPP5 OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf

Summary openclaw had a workspace boundary bypass in workspace-only path validation: when an in-workspace symlink pointed outside the workspace to a non-existent leaf, the first write could pass validation and create the file outside the workspace. Affected Packages / Versions - Package: openclaw...

7.6CVSS5.7AI score0.00322EPSS
SaveExploits0References6
Rows per page
Query Builder