CVE-2025-55182POC

CVE-2025-55182 React Server Components RCE POC 本プロジェクトは CVE-2025-55182 - React Server Components RSC RCE Proof of Concept であり、特定の条件下で vm.runInThisContext と 悪意のある ACTION payload を介してリモートコード実行をトリガーできることを示しています。 Python 側：悪意のある ACTION payload を自動送信し、レスポンスを解析 ⚠ 脆弱性の概要（CVE-2025-55182） React Server...

CVE-2026-53827 OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding

OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-controlled metadata to forward action payloads with Gateway credentials to attacker-supplied loopback URLs. Remote attackers can intercept Gateway tokens and action payloads by...

PT-2026-49031

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.2 Description An issue in message.action forwarding allows model-controlled metadata to forward action payloads containing Gateway credentials to attacker-supplied loopback URLs. Remote attackers can intercept...