https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:46:44.130261+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-43570 BREW-openclaw-cli-CVE-2026-43570 — OpenClaw contains a symlink traversal vulnerability 2026-10-04T17:46:44.133271+00:00

Affected: Homebrew: openclaw-cli

OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.

 https://cve.radiocsirt.org/vuln/euvd-2026-308715 EUVD-2026-308715 2026-10-04T17:46:44.133318+00:00 EUVD-2026-308715 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43570 fkie_cve-2026-43570 2026-10-04T17:46:44.133334+00:00

OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.

 https://cve.radiocsirt.org/vuln/ghsa-35mw-5vvr-vrxc GHSA-35mw-5vvr-vrxc — OpenClaw contains a symlink traversal vulnerability 2026-10-04T17:46:44.133357+00:00

Affected: npm: openclaw

OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1161 WID-SEC-W-2026-1161 — OpenClaw: Mehrere Schwachstellen 2026-10-04T17:46:44.133377+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.