Zeroclaw-labs vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Zeroclaw-labs products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-101885 High · 7.8 CWE-22 Sep 30, 2026

ZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path

ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field. Attackers can convince users to install crafted plugins that write arbitrary files to paths outside the plugins directory, such as shell startup files, enabling code execution.