Threats tagged 'ghsa-fv94-qvg8-xqpw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.1	CVE-2026-41364OpenClaw · SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host High8.12026-04-02GCVE DatabaseCVE-2026-41364 OpenClaw versions up to 2026.3.28 contain a vulnerability in the SSH sandbox tar upload functionality where symlinks are followed, allowing an attacker to write arbitrary files on the remote host. This issue is fixed in version 2026.3.31. The vulnerability has a high severity rating and a CVSS score of 8.1. Vulnerability CWE-59 #ghsa-fv94-qvg8-xqpw #npm	GCVE Database	2026-04-02

Page 1 of 1