PT-2026-99204 · Openclaw · Openclaw
CVSS v4.0
8.7
عالية
| المتجه | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.8.1
Description
Insufficient access restrictions to operator command cron jobs allow model-visible agent callers to read and execute ownerless command jobs. This allows attackers to inspect stored environment variables and force-run disabled or unscheduled command jobs to access secrets and execute operator-authored commands.
Recommendations
Update to version 2026.8.1.
استغلال
إصلاح
Information Disclosure
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Openclaw