Beveiligingsadvies

CVE-2026-42438

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-05 11:24:56

Laatst bijgewerkt 2026-05-05 14:48:23

Toegewezen door VulnCheck

CVSS-score 7.7

Status PUBLISHED

Beschrijving

OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file disclosure. Attackers with denied read access via toolsBySender or group policy can trigger host-media attachment loading to bypass sender and group-scoped authorization boundaries and retrieve readable local files through the outbound media path.

← Alle CVE's bekijken Bekijk op cve.org ↗