Lucene search
+L

20 matches found

OSV
OSV
added 2026/03/16 8:41 p.m.9 views

GHSA-VR7J-G7JV-H5MP OpenClaw session transcript files were created without forced user-only permissions

openclaw created new session transcript JSONL files with overly broad default permissions in affected releases. On multi-user hosts, other local users or processes could read transcript contents, including secrets that might appear in tool output. Affected Packages / Versions - Package: openclaw...

5.7CVSS5.8AI score0.0012EPSS
SaveExploits0References5
Rows per page
Query Builder