Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/18 12:57 a.m.14 views

GHSA-5XFQ-5MR7-426Q OpenClaw's unsanitized session ID enables path traversal in transcript file operations

Description OpenClaw versions = 2026.2.12 Fix Fixed by validating session IDs rejecting path separators / traversal sequences and enforcing sessions-directory containment for session transcript file operations. Fix Commits - 4199f9889f0c307b77096a229b9e085b8d856c26 Additional Hardening -...

8.4CVSS5.5AI score0.00136EPSS
SaveExploits0References7
Rows per page
Query Builder