NemoClaw

NVIDIA NemoClaw : Stack de référence pour agents IA sandboxés dans OpenShell NVIDIA NemoClaw est un stack de référence open source permettant d'exécuter des agents IA pris en charge de manière plus sûre dans des sandboxes NVIDIA OpenShell. Il fournit un onboarding guidé, une inférence gérée, une...

OpenShell

OpenShell OpenShell은 Go로 작성된 가벼운 오픈소스 리버스 셸 관리 서버입니다. 사용자가 리버스 셸 채널을 설정하고 간단한 웹 기반 그래픽 사용자 인터페이스GUI를 통해 상호작용할 수 있습니다. 버그를 발견하거나 제안 사항이 있으면 언제든지 이슈를 열어 주세요. 이 프로젝트가 유용하거나 유익하다면, 저장소에 ⭐을 눌러 주시면 대단히 감사하겠습니다! 여러분의 지원은 이 도구를 계속 개선하는 데 큰 동기부여가 됩니다. 면책 조항 이 프로젝트는 사이버 보안을 공부하는 개인적인 관심의 일환으로 개발되었습니다. 그러나...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openshell: openshell-0.1.2-0.2.hum1 aarch64, x8664 openshell-gateway-0.1.2-0.2.hum1 aarch64, x8664 python3-openshell-0.1.2-0.2.hum1 aarch64, x8664 openshell-0.1.2-0.2.hum1.src src Security Fixes:...

OpenShell

!IMPORTANT New in OpenShell 0.1.x: a stable release cadence, new isolation primitives, an expanded extension surface, and new APIs. Read the 0.1.0 upgrade guide. OpenShell is the safe, private runtime for fleets of autonomous AI agents. Agents are most useful when they can read files, install...

EUVD-2026-87454

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-100597

The OpenClaw npm package (openclaw ) prior to version 2026.7.1 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition within OpenShell local mirror filesystem mutation operations. Specifically, the remove, mkdir, and rename operations may target a different filesystem path if the pa...

CVE-2026-100597 OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-100597 OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-65093

A flaw was found in NVIDIA OpenShell. A remote authenticated attacker can exploit this vulnerability to escape the isolated sandbox environment. Successful exploitation can lead to arbitrary code execution, privilege escalation, and unauthorized access to data on the underlying host system...

PT-2026-99233

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description A time-of-check time-of-use TOCTOU race condition exists in OpenShell local mirror filesystem mutation operations. This occurs when the remove, mkdir, and rename operations act on a filesystem...

CVE-2026-100597: Time-of-check Time-of-use (TOCTOU) Race Condition

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

CVE-2026-65083

A flaw was found in NVIDIA OpenShell. The sandbox provisioning Application Programming Interface API fails to properly enforce restrictions on disallowed inputs. An authenticated remote attacker could exploit this vulnerability by submitting crafted input to bypass sandbox boundaries. Successful...

openshell: NVIDIA OpenShell: sandbox escape leading to code execution and privilege escalation

A flaw was found in NVIDIA OpenShell. A remote authenticated attacker can exploit this vulnerability to escape the isolated sandbox environment. Successful exploitation can lead to arbitrary code execution, privilege escalation, and unauthorized access to data on the underlying host system...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openshell: openshell-0.0.116-0.2.hum1 aarch64, x8664 openshell-gateway-0.0.116-0.2.hum1 aarch64, x8664 python3-openshell-0.0.116-0.2.hum1 aarch64, x8664 openshell-0.0.116-0.2.hum1.src src...

NVIDIA OpenShell: NVIDIA OpenShell: sandbox provisioning API allows code execution via incomplete input filtering

A flaw was found in NVIDIA OpenShell. The sandbox provisioning Application Programming Interface API fails to properly enforce restrictions on disallowed inputs. An authenticated remote attacker could exploit this vulnerability by submitting crafted input to bypass sandbox boundaries. Successful...

CVE-2026-65091

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-65086

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65083

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, an...