Threats tagged 'ghsa-qqq7-4hxc-x63c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.0	CVE-2026-42424OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration Medium5.02026-04-09GCVE DatabaseCVE-2026-42424 OpenClaw versions up to 2026.4.4 treat shared reply MEDIA paths as trusted, allowing a crafted reference to cause cross-channel local file exfiltration. This vulnerability affects the OpenClaw user-controlled local assistant under its trust model and does not assume multi-tenant service boundaries. The issue is fixed in version 2026.4.8. Vulnerability CWE-668 #ghsa-qqq7-4hxc-x63c #npm	GCVE Database	2026-04-09

Page 1 of 1