Beveiligingsadvies

CVE-2026-41366

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-27 23:24:29

Laatst bijgewerkt 2026-04-28 14:45:38

Toegewezen door VulnCheck

CVSS-score 6.0

Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper media parent directory validation to exfiltrate credentials and access sensitive files.

← Alle CVE's bekijken Bekijk op cve.org ↗