<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-09-28T23:56:46.153961+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-43570</id>
    <title>BREW-openclaw-cli-CVE-2026-43570 — OpenClaw contains a symlink traversal vulnerability</title>
    <updated>2026-09-28T23:56:46.170568+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Homebrew: openclaw-cli</p>
<p>OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.</p></div>
    </content>
    <link href="https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-43570"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-43570</id>
    <title>CVE-2026-43570 — OpenClaw 2026.3.22 &lt; 2026.4.5 - Symlink Traversal in Remote Marketplace Repository Path Handling</title>
    <updated>2026-09-28T23:56:46.170768+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> OpenClaw</p>
<p>OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.</p></div>
    </content>
    <link href="https://db.gcve.eu/vuln/cve-2026-43570"/>
  </entry>
</feed>
