https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 01:21:55 +0000 https://db.gcve.eu/vuln/brew-openclaw-cli-ghsa-9f72-qcpw-2hxc <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary In sandboxed runs, native prompt image auto-load did not honor `tools.fs.workspaceOnly=true`.</p> <p>This optional hardening setting is **not enabled by default**. When operators enabled it, prompt text could still reference mounted out-of-workspace image paths (for example `/agent/secret.png`) and load those image bytes for vision-capable model input.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version at triage time: `2026.2.23` - Vulnerable version range: `&lt;= 2026.2.23` - Patched version (planned next release): `2026.2.24`</p> <p>### Conditions Required This issue required all of the following: - sandbox mode enabled, - `tools.fs.workspaceOnly=true` configured, - an out-of-workspace mount path reachable from the sandbox (for example `/agent`), - vision-capable model path active for native prompt image loading.</p> <p>### Technical Details Native prompt image ingestion (`detectAndLoadPromptImages` / `loadImageFromRef`) resolved and read sandbox paths but did not apply the same workspace-root assertion used by file tools when `tools.fs.workspaceOnly` was set.</p> <p>### Fix Commit(s) - `370d115549c0dadace0902775eea0d5094aedfdc`</p> <p>### Verification - `pnpm check` - `pnpm exec vitest run --config vitest.gateway.config.ts` - `pnpm test:fast`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.24`) so once npm release is available, this advisory only needs publish action.</p> <p>OpenClaw thanks @tdjackey for reportin…</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary In sandboxed runs, native prompt image auto-load did not honor `tools.fs.workspaceOnly=true`.</p> <p>This optional hardening setting is **not enabled by default**. When operators enabled it, prompt text could still reference mounted out-of-workspace image paths (for example `/agent/secret.png`) and load those image bytes for vision-capable model input.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version at triage time: `2026.2.23` - Vulnerable version range: `&lt;= 2026.2.23` - Patched version (planned next release): `2026.2.24`</p> <p>### Conditions Required This issue required all of the following: - sandbox mode enabled, - `tools.fs.workspaceOnly=true` configured, - an out-of-workspace mount path reachable from the sandbox (for example `/agent`), - vision-capable model path active for native prompt image loading.</p> <p>### Technical Details Native prompt image ingestion (`detectAndLoadPromptImages` / `loadImageFromRef`) resolved and read sandbox paths but did not apply the same workspace-root assertion used by file tools when `tools.fs.workspaceOnly` was set.</p> <p>### Fix Commit(s) - `370d115549c0dadace0902775eea0d5094aedfdc`</p> <p>### Verification - `pnpm check` - `pnpm exec vitest run --config vitest.gateway.config.ts` - `pnpm test:fast`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.24`) so once npm release is available, this advisory only needs publish action.</p> <p>OpenClaw thanks @tdjackey for reportin…</p> https://db.gcve.eu/vuln/brew-openclaw-cli-ghsa-9f72-qcpw-2hxc