os.tmpdir() Arbitrary File Write

The vulnerability of the os.tmpdir function in the /feishu/src/media.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to an incorrect restriction on the path name of the temp directory. Exploiting this vulnerability allows a remote attacker to write arbitrary...