12 matches found
GHSA-MGRQ-9F93-WPP5 OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf
Summary openclaw had a workspace boundary bypass in workspace-only path validation: when an in-workspace symlink pointed outside the workspace to a non-existent leaf, the first write could pass validation and create the file outside the workspace. Affected Packages / Versions - Package: openclaw...
7.6CVSS5.7AI score0.00322EPSS
SaveExploits0References6
20