Directory Traversal

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Directory Traversal via double-decoding of QQBot voice attachment filenames, where encoded traversal segments reappear after sanitization. An attacker who can supply a voice attachment...