https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 03:51:56 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31990 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media staging, allowing writes to follow symlinks outside the sandbox workspace. Attackers can exploit this by placing symlinks in the media/inbound directory to overwrite arbitrary files on the host system outside sandbox boundaries.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media staging, allowing writes to follow symlinks outside the sandbox workspace. Attackers can exploit this by placing symlinks in the media/inbound directory to overwrite arbitrary files on the host system outside sandbox boundaries.</p> https://vulnerability.circl.lu/vuln/cve-2026-31990 https://vulnerability.circl.lu/vuln/ghsa-cfvj-7rx7-fc7c <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary `stageSandboxMedia` allowed destination symlink traversal during media staging, which could overwrite files outside the sandbox workspace root.</p> <p>### Impact When sandbox media staging handled inbound files, destination writes under `media/inbound` were not destination-alias-safe. If a symlink existed in that destination path, the write could follow it and overwrite host files outside the intended sandbox workspace boundary.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published version checked: `2026.3.1` - Affected: `&lt;= 2026.3.1` - Patched versions: `&gt;= 2026.3.2` (released)</p> <p>### Root Cause `stageSandboxMedia` validated source paths but wrote destination files with a direct copy path that did not enforce destination boundary/alias checks.</p> <p>### Remediation The fix routes staging writes through root-scoped safe write primitives for both local and SCP-staged attachments, preventing destination symlink traversal escapes.</p> <p>### Fix Commit(s) - `17ede52a4be3034f6ec4b883ac6b81ad0101558a`</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary `stageSandboxMedia` allowed destination symlink traversal during media staging, which could overwrite files outside the sandbox workspace root.</p> <p>### Impact When sandbox media staging handled inbound files, destination writes under `media/inbound` were not destination-alias-safe. If a symlink existed in that destination path, the write could follow it and overwrite host files outside the intended sandbox workspace boundary.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published version checked: `2026.3.1` - Affected: `&lt;= 2026.3.1` - Patched versions: `&gt;= 2026.3.2` (released)</p> <p>### Root Cause `stageSandboxMedia` validated source paths but wrote destination files with a direct copy path that did not enforce destination boundary/alias checks.</p> <p>### Remediation The fix routes staging writes through root-scoped safe write primitives for both local and SCP-staged attachments, preventing destination symlink traversal escapes.</p> <p>### Fix Commit(s) - `17ede52a4be3034f6ec4b883ac6b81ad0101558a`</p> https://vulnerability.circl.lu/vuln/ghsa-cfvj-7rx7-fc7c