Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/04/07 6:11 p.m.11 views

OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations

Summary sessionstatus still bypasses configured tools.sessions.visibility for unsandboxed invocations Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Real on shipped v2026.3.22: non-sandboxed sessionstatus skipped the shared visibility guard, but this is a...

5.9AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/04/07 6:11 p.m.5 views

GHSA-FWJQ-XWFJ-GV75 OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations

Summary sessionstatus still bypasses configured tools.sessions.visibility for unsandboxed invocations Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Real on shipped v2026.3.22: non-sandboxed sessionstatus skipped the shared visibility guard, but this is a...

6.3CVSS5.8AI score0.00199EPSS
SaveExploits0References3
Rows per page
Query Builder