Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/03 7:57 p.m.13 views

OpenClaw vulnerable to arbitrary file read via $include directive

Vulnerability Path traversal in config $include resolution allowed arbitrary local file reads outside the config directory boundary CWE-22. Attack Vectors 1. If an attacker can modify OpenClaw config, they can set $include to absolute paths for example /etc/passwd and read files accessible to the...

6.7CVSS6AI score0.00146EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder