CVE-2026-16130

CVE-2026-16130 affects nearai ironclaw up to 0.29.1. The vulnerability resides in the function validate_path within src/tools/builtin/path_utils.rs of the write_file component, enabling link following under local access. The public exploit is available, and a patch is identified by the commit/pat...