Veille CVE

Recherche « zeroclaw-labs ZeroClaw »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « zeroclaw-labs ZeroClaw » ✕
  1. CVE-2026-101885 7.8 Élevée

    zeroclaw-labs ZeroClaw

    ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field. Attackers can convince users to install crafted plugins that write arbitrary files to paths outside the plugins directory, such as shell startup files, enabling code execution.