Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7m8v-vm4p-2vf4

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 7.8

Описание

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level.

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level.

EPSS

Процентиль: 2%
0.00118
Низкий

7.1 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-829

Связанные уязвимости

CVSS3: 7.8
nvd
29 дней назад

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level.

EPSS

Процентиль: 2%
0.00118
Низкий

7.1 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-829