https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:47:10 +0000 https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-32033 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>A workspace-only file-system guard mismatch allowed `@`-prefixed absolute paths to bypass boundary validation in some tool path checks.</p> <p>### Impact When `tools.fs.workspaceOnly=true`, certain `@`-prefixed absolute paths (for example `@/etc/passwd`) could be validated before canonicalization while runtime path handling normalized the prefix differently. In affected code paths this could permit reads outside the intended workspace boundary.</p> <p>Per `SECURITY.md`, OpenClaw is primarily a personal-assistant runtime with trusted-user assumptions, and this path is gated behind non-default sandbox/tooling configuration. That reduces practical exposure, but the bypass is still a security bug and is fixed.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published at triage time: `2026.2.23` - Affected versions: `&lt;= 2026.2.23` - Patched versions: `&gt;= 2026.2.24`</p> <p>### Fix Commit(s) - `9ef0fc2ff8fa7b145d1e746d6eb030b1bf692260`</p> <p>OpenClaw thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>A workspace-only file-system guard mismatch allowed `@`-prefixed absolute paths to bypass boundary validation in some tool path checks.</p> <p>### Impact When `tools.fs.workspaceOnly=true`, certain `@`-prefixed absolute paths (for example `@/etc/passwd`) could be validated before canonicalization while runtime path handling normalized the prefix differently. In affected code paths this could permit reads outside the intended workspace boundary.</p> <p>Per `SECURITY.md`, OpenClaw is primarily a personal-assistant runtime with trusted-user assumptions, and this path is gated behind non-default sandbox/tooling configuration. That reduces practical exposure, but the bypass is still a security bug and is fixed.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published at triage time: `2026.2.23` - Affected versions: `&lt;= 2026.2.23` - Patched versions: `&gt;= 2026.2.24`</p> <p>### Fix Commit(s) - `9ef0fc2ff8fa7b145d1e746d6eb030b1bf692260`</p> <p>OpenClaw thanks @tdjackey for reporting.</p> https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-32033 https://db.gcve.eu/vuln/cve-2026-32033 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due to canonicalization mismatch. Attackers can exploit this by crafting @-prefixed paths like @/etc/passwd to read files outside the intended workspace boundary when tools.fs.workspaceOnly is enabled.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due to canonicalization mismatch. Attackers can exploit this by crafting @-prefixed paths like @/etc/passwd to read files outside the intended workspace boundary when tools.fs.workspaceOnly is enabled.</p> https://db.gcve.eu/vuln/cve-2026-32033