Threat database

LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Attackers who obtain a providers export file can derive the AES-GCM key via PBKDF2 using the embedded salt and recover every third-party AI provider API key.

NetEase Cloud Music client for Windows versions 3.1.38 and 3.1.39.205426 use a hard-coded AES-128-ECB cryptographic key to decrypt certain API responses. This weak encryption lacks integrity checks, allowing attackers who can intercept or originate server responses to forge valid ciphertext. Such forged responses can be accepted by the client, potentially enabling further exploitation such as accessing the os.navigateExternal bridge.

NetEase Cloud Music client for Windows versions 3.1.38 and 3.1.39.205426 have a critical TLS certificate validation vulnerability. The client fails to properly validate the server certificate chain, hostname, and does not consult the Windows certificate trust store. This allows a network-adjacent attacker to perform man-in-the-middle attacks, decrypt HTTPS traffic, capture session credentials, and modify server responses, potentially leading to account takeover and response forgery.

NetEase Cloud Music client for Windows versions 3.1.38 and 3.1.39.205426 contains a critical remote code execution vulnerability. The flaw is in the renderer-process IPC bridge os.navigateExternal, which improperly handles URLs passed to ShellExecuteW without validating the URL scheme. An attacker able to inject content into the renderer, for example by forging an API response using a known AES key over an unvalidated TLS connection, can exploit this to execute arbitrary local binaries with the logged-in user's privileges.

LobsterAI versions 2026.5.27 through 2026.9.23 have a vulnerability where the uninstallation process can be manipulated via a crafted skill's _meta.json file. This flaw allows an attacker to cause recursive deletion of arbitrary user-writable directories by controlling the openclawSourceDir value. The vulnerability arises because the security scanner does not inspect the _meta.json file during skill installation.

A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowserConfig of the file src/main/libs/openclawConfigSync.ts of the component Browser Network Configuration. The manipulation results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.

QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_doc_qa/get_doc endpoints that allows unauthenticated attackers to access any uploaded file or document. Attackers can enumerate file identifiers through unauthenticated endpoints and retrieve base64-encoded files or parsed document chunks without ownership verification to disclose cross-tenant knowledge base content.

CVE-2026-18995 is an information disclosure vulnerability in netease-youdao LobsterAI version 2026.6.10. The flaw exists in the parseMediaTokensFromText function within the MEDIA Path Handler component. This vulnerability can be exploited remotely and has a published exploit available. The vendor has been informed but has not yet responded or issued a fix.