https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:02:00 +0000 https://cve.radiocsirt.org/vuln/cve-2026-32055 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace through in-workspace symlinks pointing to non-existent out-of-root targets. The vulnerability exists because the boundary check improperly resolves aliases, permitting the first write operation to escape the workspace boundary and create files in arbitrary locations.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace through in-workspace symlinks pointing to non-existent out-of-root targets. The vulnerability exists because the boundary check improperly resolves aliases, permitting the first write operation to escape the workspace boundary and create files in arbitrary locations.</p> https://cve.radiocsirt.org/vuln/cve-2026-32055 https://cve.radiocsirt.org/vuln/ghsa-mgrq-9f93-wpp5 <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary `openclaw` had a workspace boundary bypass in workspace-only path validation: when an in-workspace symlink pointed outside the workspace to a non-existent leaf, the first write could pass validation and create the file outside the workspace.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Vulnerable versions: `&lt;= 2026.2.25` - Patched versions: `&gt;= 2026.2.26` (pre-set for next planned release) - Latest published npm version at update time: `2026.2.25`</p> <p>### Details The boundary check path resolved aliases in a way that allowed a non-existent out-of-root symlink target to pass the initial validation window. A first write through the guarded workspace path could therefore escape the workspace boundary.</p> <p>The fix hardens canonical boundary resolution so missing-leaf alias paths are evaluated against canonical containment, while preserving valid in-root aliases. This closes the first-write escape condition without regressing valid in-root alias usage.</p> <p>### Fix Commit(s) - `46eba86b45e9db05b7b792e914c4fe0de1b40a23` - `1aef45bc060b28a0af45a67dc66acd36aef763c9`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.26`). Once npm release `2026.2.26` is published, this advisory can be published directly.</p> <p>Thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary `openclaw` had a workspace boundary bypass in workspace-only path validation: when an in-workspace symlink pointed outside the workspace to a non-existent leaf, the first write could pass validation and create the file outside the workspace.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Vulnerable versions: `&lt;= 2026.2.25` - Patched versions: `&gt;= 2026.2.26` (pre-set for next planned release) - Latest published npm version at update time: `2026.2.25`</p> <p>### Details The boundary check path resolved aliases in a way that allowed a non-existent out-of-root symlink target to pass the initial validation window. A first write through the guarded workspace path could therefore escape the workspace boundary.</p> <p>The fix hardens canonical boundary resolution so missing-leaf alias paths are evaluated against canonical containment, while preserving valid in-root aliases. This closes the first-write escape condition without regressing valid in-root alias usage.</p> <p>### Fix Commit(s) - `46eba86b45e9db05b7b792e914c4fe0de1b40a23` - `1aef45bc060b28a0af45a67dc66acd36aef763c9`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.26`). Once npm release `2026.2.26` is published, this advisory can be published directly.</p> <p>Thanks @tdjackey for reporting.</p> https://cve.radiocsirt.org/vuln/ghsa-mgrq-9f93-wpp5