OpenClaw_Termux

How to install and run OpenClaw on Android by installing Ubuntu inside Termux no root, then launching the OpenClaw Gateway and chatting with it from WhatsApp, Telegram, or Discord. Prerequisites no root Android phone, Termux, Termux:API apps from F‑Droid not from Google Play The one‑command...

PYSEC-2026-3607 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive

Repository: termux/proot-distro Component: prootdistro/commands/install.py → extractplaintar; also helpers/docker.py → applylayer --- Affected Versions| Component | Version ||---------------|------------------------------|| proot-distro | 5.0.2 confirmed vulnerable || Termux app | 0.119.0-beta.3 ...

PYSEC-2026-3608 `proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive

Repository: termux/proot-distro Component: prootdistro/commands/install.py → extractplaintar; also helpers/docker.py → applylayer --- Affected Versions | Component | Version | |---------------|------------------------------| | proot-distro | 5.0.2 confirmed vulnerable | | Termux app |...

proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component- Package: proot-distro- Affected command: restore- Attack surface: Host-side Termux CLI processing a user-supplied backup archive- Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write--- Affected Versions| Component | Version ||---|---|| proot-distro ...

Path Traversal

proot-distro is vulnerable to Path Traversal. The vulnerability is due to improper validation of archive-controlled symbolic link targets member.linkname when extracting plain tarball root filesystems and Docker layers, which allows an attacker to craft a malicious archive containing absolute...

CVE-2026-54727

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

CVE-2026-54574

proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through extractplaintar in prootdistro/commands/install.py and Docker layers through applylayer in prootdistro/helpers/docker.py without validating...

GHSA-7H3G-4W2F-FJ2F proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

Exposure of Resource to Wrong Sphere

Overview proot-distro is a PRoot-Distro is a lightweight rootless Linux container management utility built around proot. Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the restore process. An attacker can access sensitive files from other containers or...

proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

CVE-2026-54727 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

CVE-2026-54727

CVE-2026-54727 affects proot-distro: prior to 5.1.6, the restore command accepted hardlink entries whose linkname pointed to a different installed container and did not verify the source container matches the destination being restored. This could enable cross-container data copying or injection ...

CVE-2026-54727 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

CVE-2026-54727

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

CVE-2026-54727 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

EUVD-2026-50415

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

UNIX Symbolic Link (Symlink) Following

Overview proot-distro is a PRoot-Distro is a lightweight rootless Linux container management utility built around proot. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the prootdistro/commands/install.py function and the equivalent process in...

`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive

Repository: termux/proot-distro Component: prootdistro/commands/install.py → extractplaintar; also helpers/docker.py → applylayer --- Affected Versions | Component | Version | |---------------|------------------------------| | proot-distro | 5.0.2 confirmed vulnerable | | Termux app |...

GHSA-9XQ3-3FQG-4VG7 `proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive

Repository: termux/proot-distro Component: prootdistro/commands/install.py → extractplaintar; also helpers/docker.py → applylayer --- Affected Versions | Component | Version | |---------------|------------------------------| | proot-distro | 5.0.2 confirmed vulnerable | | Termux app |...