Threats tagged 'ghsa-hj9p-9244-xg6j'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2026-100549OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded traversal segments to reappear after sanitization Medium5.4EPSS 0.3%2026-09-26GCVE DatabaseCVE-2026-100549 OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded traversal segments to reappear after sanitization. Attackers can supply crafted voice attachments that write files outside the intended staging directory to other process-writable locations. EPSS 0.3%Vulnerability CWE-22 #ghsa-hj9p-9244-xg6j	GCVE Database	2026-09-26

Page 1 of 1