Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
added 2026/03/12 2:21 p.m.16 views

OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf

Summary openclaw had a workspace boundary bypass in workspace-only path validation: when an in-workspace symlink pointed outside the workspace to a non-existent leaf, the first write could pass validation and create the file outside the workspace. Affected Packages / Versions - Package: openclaw...

8.2CVSS5.8AI score0.00322EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder