CVE-2026-32232

Name of the Vulnerable Software and Affected Versions ZeptoClaw versions prior to 0.7.6

Description ZeptoClaw, a personal AI assistant, is affected by multiple security issues related to workspace boundary enforcement. These include a Dangling Symlink Component Bypass, a Time-of-Check-to-Time-of-Use (TOCTOU) race condition between validation and use, and a Hardlink Alias Bypass. The Dangling Symlink Component Bypass occurs because path validation may fail to detect unresolved symlink components during traversal checks, potentially allowing operations to escape workspace boundaries. The TOCTOU vulnerability arises from a time gap between path validation and subsequent filesystem operations, where a concurrent filesystem change could swap path components after validation, leading to a race-based workspace escape. The Hardlink Alias Bypass allows a file within the workspace to be a hardlink to an inode outside the trusted boundary, potentially enabling unauthorized access to external content through a seemingly in-scope path. These issues could lead to unauthorized cross-path boundary access. Proof-of-concept exploits demonstrate how to create dangling symlinks, manipulate paths during the validation-to-use window, and leverage hardlinks to bypass security checks.

Recommendations Versions prior to 0.7.6 should be updated to version 0.7.6 to address these vulnerabilities.