Threats tagged 'ghsa-prp6-v677-xqhq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2026-44996OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper Medium6.3EPSS 0.3%2026-05-11GCVE DatabaseCVE-2026-44996 OpenClaw versions before 2026.4.15 have an arbitrary local file read vulnerability in the webchat audio embedding helper. This flaw allows attackers to manipulate ReplyPayload.mediaUrl parameters to read local audio-like files by bypassing local media root containment checks. The read files can then be embedded base64-encoded into webchat responses. EPSS 0.3%Report on CVE-2026-44996 Vulnerability CWE-22 #ghsa-prp6-v677-xqhq	GCVE Database	2026-05-11

Page 1 of 1