Threats tagged 'ghsa-h86r-7gjv-6c7v'

CVE-2026-8113 is a path traversal vulnerability in the isPathInside function of the executeSkillScript component in 8421bit MiniClaw. This flaw allows remote attackers to manipulate paths, potentially accessing unauthorized files. The vulnerability has been publicly disclosed with available exploit details. The product uses rolling releases, so specific affected or fixed versions are not provided. A patch identified by commit e8bd4e17e9428260f2161378356affc5ce90d6ed addresses the issue. The CVSS score is 4.3 (medium severity), indicating low confidentiality impact and no integrity or availability impact.