Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/18 12:33 a.m.24 views

OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning

Summary Discovery beacons Bonjour/mDNS and DNS-SD include TXT records such as lanHost, tailnetDns, gatewayPort, and gatewayTlsSha256. TXT records are unauthenticated. Prior to the fix, some clients treated TXT values as authoritative routing/pinning inputs: - iOS and macOS: used TXT-provided host...

7.1CVSS5.6AI score0.001EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder