8 matches found
CVE-2026-30741
보안 권고: CVE-2026-30741 제품: OpenClaw 에이전트 플랫폼 영향을 받는 버전: v2026.2.6 및 이전 버전 취약점 유형: 요청 측 프롬프트 인젝션Request-Side Prompt Injection을 통한 원격 코드 실행RCE 설명: 업스트림 API 요청에 대한 무결성 검증 부재로 인해 요청 스트림 오염request-stream poisoning이 가능합니다. 이로 인해 고성능 모델이 인간의 확인 없이 MCP 도구를 통해 실행되는 무단 터미널 명령을 생성하게 됩니다. 📺 개념 증명PoC 귀하의 브라우저는...
EUVD-2026-11205
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
OpenClaw Agent Platform up to v2026.2.6 is affected by a remote code execution (RCE) via a Request-Side prompt injection attack. The root cause is a lack of integrity validation for upstream API requests, which can cause high‑severity command execution in downstream components (e.g., MCP tools) w...
