CVE Intelligence

Zeroclaw-labs ZeroClaw vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Zeroclaw-labs ZeroClaw: 1 record(s), with affected versions and fixes.

CVE-2026-101885 High · 7.8 CWE-22 Sep 30, 2026
ZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path
ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field. Attackers can convince users to install crafted plugins that write arbitrary files to paths outside the plugins directory, such as shell startup files, enabling code execution.