Threats tagged 'ghsa-2mj8-f2gc-5q5j'

CVE-2026-19008 is a medium severity vulnerability in the mf-yang openclaw-cn project up to version 0.2.1. It affects the assertNoSymlinkEscape function in the apply_patch Tool component, allowing link following due to improper handling of symbolic links. The vulnerability can be exploited remotely. Public exploit code is available, but the project has not yet responded or issued a fix.