Threats tagged 'ghsa-3qpv-xf3v-mm45'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.8	CVE-2026-41336OpenClaw · Workspace `.env` can override the bundled hooks root and load attacker hook code High7.82026-04-02GCVE DatabaseCVE-2026-41336 OpenClaw versions up to 2026.3.28 allow a workspace .env file to override the bundled hooks root directory, enabling loading of attacker-controlled hook code. This vulnerability is fixed in version 2026.3.31. The flaw can lead to high impact including confidentiality, integrity, and availability compromise. Vulnerability CWE-15 #ghsa-3qpv-xf3v-mm45 #npm	GCVE Database	2026-04-02

Page 1 of 1