thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes… (CVE-2026-108839)

The vulnerability in thClaws up to version 0.141.0 involves the post_inputs handler of the v1 API POST /v1/inputs endpoint improperly following symbolic links. An attacker who can place a symlink under the inputs/ prefix can exploit this to write or truncate files outside the workspace, leveraging daemon-level privileges. This is classified as CWE-59 (Link Following). The CVSS 3.1 base score is 4.2, reflecting network attack vector, high attack complexity, no privileges required but user interaction needed, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Successful exploitation allows an attacker to write or truncate files outside the designated workspace with daemon privileges, potentially affecting system integrity and availability. There is no confidentiality impact reported. The attack requires user interaction and has high attack complexity, limiting ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict the ability to plant symbolic links under the inputs/ prefix and limit authenticated user permissions to reduce risk.