Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/26 9:46 p.m.7 views

OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting

Summary ACP permission resolution trusted conflicting tool identity hints from rawInput and metadata, which could suppress dangerous-tool prompting. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked: v2026.3.23-2...

6.9CVSS5.8AI score0.00228EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder