Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/25 11:45 p.m.14 views

OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The Control UI assistant-media route authenticated trusted-proxy callers but did not enforce the declared operator scopes for identity-bearing HTTP auth paths. A trusted-proxy...

6.5CVSS5.3AI score0.00222EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder