Erichen-X

**Name of the Vulnerable Software and Affected Versions** heshengtao super-agent-party versions prior to 0.4.2 **Description** Remote attackers can trigger server-side request forgery (SSRF) by manipulating the `url` argument within the `sanitize proxy url()` function located in the `server.py` file of the `extension proxy` Route component. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** As a temporary workaround, restrict access to the `sanitize proxy url()` function in the `extension proxy` Route component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** heshengtao super-agent-party versions prior to 0.4.2 **Description** A remote information disclosure issue exists within the `execute tool manually` endpoint. The flaw is located in the `get file content()` function of the `server.py` file. An attacker can trigger this by manipulating the `tool name` and `tool params` variables. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `execute tool manually` endpoint or avoid using the `tool name` and `tool params` variables within the `get file content()` function.

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot versions prior to 4.25.6 **Description** Remote manipulation of the `req.func tool` argument within a function in the `astrbot/core/astr main agent.py` file leads to incorrect authorization. **Recommendations** Install the patch identified as d23011262e8e75e1ec41b0f1f0091493a022327e for versions prior to 4.25.6.

**Name of the Vulnerable Software and Affected Versions** mf-yang openclaw-cn versions prior to 0.2.2 **Description** A remote information disclosure issue exists in the Scheme Handler component. The problem resides in the `assertBrowserNavigationAllowed()` function within the `src/browser/navigation-guard.ts` file. An attacker can exploit this by manipulating the `url` argument to disclose sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict the use of the `assertBrowserNavigationAllowed()` function.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent version 2026.6.5 **Description** Improper access controls exist within the SimpleX Gateway Authorization component, specifically in the file `hermes-agent/plugins/platforms/simplex/adapter.py`. A remote attacker can exploit this by manipulating the `contactId` argument. This attack is characterized by high complexity and is considered difficult to execute. **Recommendations** Apply patch 490c486ff65b766d9de0fe0e6f26e1778aaa8fb3 for version 2026.6.5.

**Name of the Vulnerable Software and Affected Versions** openclaw-cn versions prior to 0.2.2 **Description** An issue exists in the Browser Control HTTP API component within the `clickViaPlaywright()` function located in the `src/browser/routes/agent.act.ts` file. A remote attacker can perform a manipulation that leads to server-side request forgery (SSRF), a condition where the server is coerced into making unauthorized requests to an arbitrary destination. **Recommendations** As a temporary workaround, restrict access to the `clickViaPlaywright()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ananocoai NanoClaw versions prior to 2.0.65 **Description** An improper authorization issue exists within the MCP Server Approval component, specifically affecting the `createChatSdkBridge.setup()` function located in the `src/channels/chat-sdk-bridge.ts` file. A local attacker can perform a manipulation to bypass authorization controls. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict local access to the `createChatSdkBridge.setup()` function.

**Name of the Vulnerable Software and Affected Versions** ananocoai NanoClaw versions prior to 2.0.65 **Description** A flaw in the `add mcp server` component allows for improper authorization via remote manipulation. The issue resides within the `handleAddMcpServer()` function located in the `src/modules/self-mod/request.ts` file. **Recommendations** Apply patch e5b928783d5c485637565eb07d2967922dfbf8d8 to remediate the issue. As a temporary workaround, restrict access to the `handleAddMcpServer()` function until the patch is applied.