Eric-X

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw versions prior to 3.13.3-beta.4 **Description** A flaw in the `ExecTool.Execute()` function within the `goclaw/internal/tools/credentialed exec.go` file allows for improper authorization. This issue can be exploited remotely to achieve remote code execution, which is the ability of an attacker to execute arbitrary commands on a target machine over a network. **Recommendations** Update nextlevelbuilder GoClaw to version 3.13.3-beta.4 or later. As a temporary workaround, restrict access to the `ExecTool.Execute()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** rt-claw versions prior to 0.2.1 **Description** An information disclosure issue exists in the `http request` component. A remote attacker can manipulate the `claw net get()` and `claw net post()` functions within the `claw/services/tools/net.c` file to disclose sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `claw net get()` and `claw net post()` functions.

**Name of the Vulnerable Software and Affected Versions** zevorn rt-claw versions prior to 0.2.1 **Description** An issue in the RPC Handler component allows for incorrect authorization. This occurs within the `claw tool invoke()` function located in the `claw/services/swarm/swarm.c` file, which can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `claw tool invoke()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** princezuda SafestClaw versions prior to 4.2.5 **Description** An issue exists in the Built-in Web Interface within the `ShellAction. validate command()` function located in the `src/safestclaw/actions/shell.py` file. This flaw results in an incomplete blacklist, which could be exploited by a local attacker. **Recommendations** Update princezuda SafestClaw to version 4.2.5 or later. As a temporary mitigation, restrict local access to the Built-in Web Interface or avoid using the `ShellAction. validate command()` function.

**Name of the Vulnerable Software and Affected Versions** nearai ironclaw versions prior to 0.29.2 **Description** A flaw exists in the `write file` component within the `validate path()` function located in the `src/tools/builtin/path utils.rs` file. This issue allows for link following, which occurs when a program follows a symbolic link to a location outside the intended directory. Local access is required to execute this attack. **Recommendations** Apply patch 369ff3d240cf3c0787b50e1e9f182e1a06c71255 to resolve the issue. As a temporary mitigation, restrict access to the `validate path()` function.

**Name of the Vulnerable Software and Affected Versions** zhayujie CowAgent versions prior to 2.1.2 **Description** An issue exists in the `WebFetch.execute()` function within the `agent/tools/web fetch/web fetch.py` file. A remote attacker can manipulate the `url` argument to perform server-side request forgery (SSRF), a technique where the server is coerced into making unauthorized requests to internal or external resources. **Recommendations** Upgrade to version 2.1.2.

**Name of the Vulnerable Software and Affected Versions** zhayujie CowAgent versions prior to 2.1.1 **Description** An issue in the Browser Tool component allows for remote information disclosure. The flaw exists within the `BrowserTool. do navigate()` function located in the `agent/tools/browser/browser tool.py` file. **Recommendations** As a temporary workaround, restrict the use of the `BrowserTool. do navigate()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** zhayujie CowAgent versions prior to 2.1.2 **Description** An issue exists in the Vision Tool component within the ` build image content()` and ` download to data url()` functions of the `agent/tools/vision/vision.py` file. The software fetches a user-supplied `image` argument without restricting the destination, allowing a remote attacker to manipulate this value to induce the server to make requests to arbitrary internal targets, such as internal services and cloud metadata endpoints. This condition leads to server-side request forgery (SSRF), which is a technique used to make a server perform requests to a destination it was not intended to. **Recommendations** Upgrade to version 2.1.2.

**Name of the Vulnerable Software and Affected Versions** zhayujie CowAgent versions prior to 2.1.2 **Description** In the Skill Installation Handler component, the ` add url()` and ` add package()` functions within the `agent/skills/service.py` file are susceptible to path traversal. This occurs when the `Name` argument is manipulated, allowing a remote attacker to access or overwrite files outside the intended directory. **Recommendations** Upgrade to version 2.1.2.

**Name of the Vulnerable Software and Affected Versions** zhayujie CowAgent versions prior to 2.1.1 **Description** A security flaw in the Message Endpoint component, specifically within an unknown function of the `channel/channel.py` file, allows for missing authorization. This issue enables a remote attacker to perform unauthorized actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenBMB XAgent version 1.0.0 **Description** A flaw exists in OpenBMB XAgent that allows for path traversal. The issue is located within the `workspace` function of the `XAgentServer/application/routers/workspace.py` file. Manipulation of the `file name` argument can lead to unauthorized access. This issue can be exploited remotely, and a public exploit is available. The project was notified of the issue but has not yet responded. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** eosphoros-ai db-gpt version 0.7.5 **Description** A security flaw exists in eosphoros-ai db-gpt version 0.7.5 related to code injection. The issue is located in the function `importlib.machinery.SourceFileLoader.exec module` within the file `/api/v1/serve/awel/flow/import` of the Flow Import Endpoint component. Manipulation of a file as part of the process can lead to code injection. The attack can be initiated remotely. The exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.