https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 02:16:09 +0000 https://db.gcve.eu/vuln/brew-openclaw-cli-ghsa-659f-22xc-98f2 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Vulnerability</p> <p>Webhook transform modules were validated with lexical path checks only. A symlink under the allowed hooks transform tree could resolve outside the intended directory and be dynamically imported.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.21-2` - Patched version (planned next release): `2026.2.22`</p> <p>## Impact</p> <p>When an attacker can cause a transform module path to reference a symlinked entry that resolves outside the trusted transform directory, the gateway may import and execute unintended JavaScript with gateway-process privileges.</p> <p>## Attack Preconditions</p> <p>- Hook transforms are enabled and reachable. - Attacker can influence transform path resolution (for example via privileged config access and/or writable filesystem path in the transform tree). - A symlink escape exists to attacker-controlled code.</p> <p>## Remediation</p> <p>- Enforce realpath-aware containment for existing path ancestors before dynamic import. - Keep lexical containment checks for traversal and absolute-path escapes. - Add regression coverage for: - transform module symlink escape rejection, - `hooks.transformsDir` symlink escape rejection, - in-root symlink allow-case.</p> <p>## Fix Commit(s)</p> <p>- `f4dd0577b055f77af783105bd65eae32f3d5e6a1`</p> <p>OpenClaw thanks @aether-ai-agent for reporting.</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Vulnerability</p> <p>Webhook transform modules were validated with lexical path checks only. A symlink under the allowed hooks transform tree could resolve outside the intended directory and be dynamically imported.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.21-2` - Patched version (planned next release): `2026.2.22`</p> <p>## Impact</p> <p>When an attacker can cause a transform module path to reference a symlinked entry that resolves outside the trusted transform directory, the gateway may import and execute unintended JavaScript with gateway-process privileges.</p> <p>## Attack Preconditions</p> <p>- Hook transforms are enabled and reachable. - Attacker can influence transform path resolution (for example via privileged config access and/or writable filesystem path in the transform tree). - A symlink escape exists to attacker-controlled code.</p> <p>## Remediation</p> <p>- Enforce realpath-aware containment for existing path ancestors before dynamic import. - Keep lexical containment checks for traversal and absolute-path escapes. - Add regression coverage for: - transform module symlink escape rejection, - `hooks.transformsDir` symlink escape rejection, - in-root symlink allow-case.</p> <p>## Fix Commit(s)</p> <p>- `f4dd0577b055f77af783105bd65eae32f3d5e6a1`</p> <p>OpenClaw thanks @aether-ai-agent for reporting.</p> https://db.gcve.eu/vuln/brew-openclaw-cli-ghsa-659f-22xc-98f2