Threats tagged 'ghsa-2f7j-rp58-mr42'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2026-41339OpenClaw · Gateway hello snapshots exposed host config and state paths to non-admin clients Medium4.32026-04-07GCVE DatabaseCVE-2026-41339 OpenClaw versions up to 2026.4.1 expose local host filesystem paths and deployment metadata to low-privilege authenticated clients via the Gateway connect success snapshot. This information disclosure allows non-admin clients to learn sensitive host configuration details that are unnecessary for their role. The issue is fixed in version 2026.4.2. Vulnerability CWE-200 #ghsa-2f7j-rp58-mr42 #npm	GCVE Database	2026-04-07

Page 1 of 1