Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/03/03 12:40 a.m.7 views

OpenClaw: Node reconnect metadata spoofing could bypass platform-based node command policy

Summary A paired node device could reconnect with spoofed platform/deviceFamily metadata and broaden node command policy eligibility because reconnect metadata was accepted from the client while these fields were not bound into the device-auth signature. Affected Packages / Versions - Package:...

8.6CVSS6AI score0.0019EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder