Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/28 12:31 a.m.13 views

Duplicate Advisory: OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fv94-qvg8-xqpw. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote...

8.1CVSS5.9AI score0.00533EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder