Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2026/04/07 6:15 p.m.11 views

OpenClaw: Gateway hello snapshots exposed host config and state paths to non-admin clients

Summary Before OpenClaw 2026.4.2, the Gateway connect success snapshot exposed local configPath and stateDir metadata to non-admin clients. Low-privilege authenticated clients could learn host filesystem layout and deployment details that were not needed for their role. Impact A non-admin client...

5.3CVSS5.9AI score0.00283EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder