5 matches found
GHSA-3C6J-HQ33-3JV4 OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance
Summary OpenClaw nodes send lifecycle events back to the gateway. In affected releases, a paired node could send an exec lifecycle event that was accepted without enough provenance tying it to an authorized system.run request. This issue affects the node event boundary. It does not allow an...
8.6CVSS5.8AI score0.00342EPSS
SaveExploits0References4
20