20 matches found
GHSA-VR7J-G7JV-H5MP OpenClaw session transcript files were created without forced user-only permissions
openclaw created new session transcript JSONL files with overly broad default permissions in affected releases. On multi-user hosts, other local users or processes could read transcript contents, including secrets that might appear in tool output. Affected Packages / Versions - Package: openclaw...
5.7CVSS5.8AI score0.0012EPSS
SaveExploits0References5
20