Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/03 12:40 a.m.16 views

GHSA-R65X-2HQR-J5HF OpenClaw: Node reconnect metadata spoofing could bypass platform-based node command policy

Summary A paired node device could reconnect with spoofed platform/deviceFamily metadata and broaden node command policy eligibility because reconnect metadata was accepted from the client while these fields were not bound into the device-auth signature. Affected Packages / Versions - Package:...

8.6CVSS6AI score0.0019EPSS
SaveExploits0References5
Rows per page
Query Builder