Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/17 10:33 p.m.30 views

OpenClaw: Webchat media embedding enforces local-root containment for tool-result files

Summary Webchat tool-result media normalization could pass local and UNC-style file paths into the host-side media embedding path without applying the configured local-root containment policy. Impact A crafted tool-result media reference could cause the host to attempt local file reads or Windows...

6.3CVSS5.7AI score0.00264EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder