Threats tagged 'ghsa-4gx2-8r4q-vj5x'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.4	EPSS 0.2%	CVE-2026-100529OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths Medium6.4EPSS 0.2%2026-09-26GCVE DatabaseCVE-2026-100529 OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for unreviewed paths. Attackers can exploit glob metacharacter interpretation and node display name reuse to access sibling paths or different nodes beyond the operator's original approval scope. EPSS 0.2%Vulnerability CWE-863 #ghsa-4gx2-8r4q-vj5x	GCVE Database	2026-09-26

Page 1 of 1