https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:47:11 +0000 https://vulnerability.circl.lu/vuln/cve-2026-32020 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file reads. Attackers can place symlinks under the Control UI root directory to bypass directory confinement checks and read arbitrary files outside the intended root.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file reads. Attackers can place symlinks under the Control UI root directory to bypass directory confinement checks and read arbitrary files outside the intended root.</p> https://vulnerability.circl.lu/vuln/cve-2026-32020 https://vulnerability.circl.lu/vuln/ghsa-5ghc-98wh-gwwf <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary The Control UI static file handler previously validated asset paths lexically and then served files with APIs that follow symbolic links. A symlink placed under the Control UI root could cause out-of-root file reads.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published version observed: `2026.2.21-2` - Affected versions: `&lt;=2026.2.21-2` - Planned fixed release version: `2026.2.22`</p> <p>### Technical Details The vulnerable flow was in `src/gateway/control-ui.ts`, where `path.join(...)` + string-prefix checks were followed by file reads that resolved symlinks. This allowed directory-confinement bypasses when symlinks existed inside the Control UI root.</p> <p>The fix now enforces realpath containment and verifies file identity before serving Control UI assets and SPA fallback `index.html`.</p> <p>### Impact - Vulnerability type: path traversal / external file exposure via symlink following. - Primary impact: confidentiality (out-of-root file read). - Severity guidance: low in supported trusted-operator deployments; can be higher in unsupported shared-writable setups.</p> <p>### Fix Commit(s) - `7c500ff6236fa087ec1ec88696ca9f6881e90dc5`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.22`). After npm release is available, publish the advisory.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary The Control UI static file handler previously validated asset paths lexically and then served files with APIs that follow symbolic links. A symlink placed under the Control UI root could cause out-of-root file reads.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published version observed: `2026.2.21-2` - Affected versions: `&lt;=2026.2.21-2` - Planned fixed release version: `2026.2.22`</p> <p>### Technical Details The vulnerable flow was in `src/gateway/control-ui.ts`, where `path.join(...)` + string-prefix checks were followed by file reads that resolved symlinks. This allowed directory-confinement bypasses when symlinks existed inside the Control UI root.</p> <p>The fix now enforces realpath containment and verifies file identity before serving Control UI assets and SPA fallback `index.html`.</p> <p>### Impact - Vulnerability type: path traversal / external file exposure via symlink following. - Primary impact: confidentiality (out-of-root file read). - Severity guidance: low in supported trusted-operator deployments; can be higher in unsupported shared-writable setups.</p> <p>### Fix Commit(s) - `7c500ff6236fa087ec1ec88696ca9f6881e90dc5`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.22`). After npm release is available, publish the advisory.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> https://vulnerability.circl.lu/vuln/ghsa-5ghc-98wh-gwwf