Mark

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions 2026.1.16-2 through 2026.2.13 **Description** A path traversal issue exists in archive extraction during installation commands. This allows a crafted archive to write files outside the intended extraction directory. The issue affects users who run installation commands against untrusted archives, such as those downloaded from a local file or URL. Specifically, the affected commands include `openclaw skills install`, `openclaw hooks install`, `openclaw plugins install`, and `openclaw signal install`. Successful exploitation can lead to arbitrary file write as the current user, potentially enabling persistence or code execution if an attacker can convince a user to install a malicious archive. **Recommendations** Update to version 2026.2.14 or later.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The Linux kernel contains an issue where the `kexec buf` structure was declared without initialization. This could lead to the use of uninitialized memory, triggering a UBSAN (Undefined Behavior Sanitizer) warning when accessing an uninitialized field within the structure. The issue was identified during the loading of other segments and addressed by zero-initializing the `kexec buf` structure at its declaration to ensure all fields are properly set. The problem was initially observed on arm64 architectures and subsequently extended to riscv. The `kexec buf` structure is used in the kexec functionality, which allows for fast booting of a new kernel without going through the traditional bootloader process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 69.0.3497.81 **Description** The issue is caused by an unintended floating-point error accumulation in SwiftShader, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can be exploited by a remote attacker to gain unauthorized access to protected information. The vulnerability is also described as a buffer overflow read in memory, which can be exploited using a specially crafted HTML page. **Recommendations** For versions prior to 69.0.3497.81, update to version 69.0.3497.81 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** fscrypt versions prior to 0.2.4 **Description** The issue concerns the pam fscrypt module in fscrypt, which may incorrectly restore primary and supplementary group IDs to the values associated with the root user. This allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM. Specifically, after dropping and then elevating process privileges, the euid, guid, and groups are not properly restored to their original values, allowing an unprivileged user to gain membership in the root group. **Recommendations** For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the pam fscrypt module until a patch is available. Avoid using applications that rely on Linux-PAM for authentication until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** libid3tag versions 0.15.1b and earlier **Description** The issue arises from the `id3 utf16 deserialize()` function in `utf16.c`, which misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes. This triggers an endless loop that allocates memory until an out-of-memory (OOM) condition is reached, resulting in a denial-of-service (DoS). **Recommendations** For libid3tag versions 0.15.1b and earlier, consider disabling the `id3 utf16 deserialize()` function until a patch is available to prevent the denial-of-service condition.

**Name of the Vulnerable Software and Affected Versions** libzrtpcpp versions prior to 3.2.0 GNU ZRTPCPP versions prior to 3.2.0 **Description** The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely, potentially allowing attackers to obtain sensitive information or cause a denial of service. Specifically, a crafted packet can lead to an out-of-bounds read, as demonstrated by a truncated Ping packet that is not properly handled by the `getEpHash` function. **Recommendations** For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `getEpHash` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Apache Tomcat versions 7.0.0 through 7.0.10 **Description** The issue allows remote attackers to bypass intended access restrictions via HTTP requests to a web application because it does not follow ServletSecurity annotations when web.xml has no security constraints. **Recommendations** For Apache Tomcat versions 7.0.0 through 7.0.10, update to version 7.0.11 or later to resolve the issue.