Beveiligingsadvies

CVE-2026-32033

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-19 22:07:08

Laatst bijgewerkt 2026-06-23 16:14:48

Toegewezen door VulnCheck

CVSS-score 6.5

Status PUBLISHED

Beschrijving

OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due to canonicalization mismatch. Attackers can exploit this by crafting @-prefixed paths like @/etc/passwd to read files outside the intended workspace boundary when tools.fs.workspaceOnly is enabled.

← Alle CVE's bekijken Bekijk op cve.org ↗