Vulnerabilidades de Zeroclaw-labs

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Zeroclaw-labs: 1 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-101885 Alta · 7.8 CWE-22 30/09/2026

ZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path

ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field. Attackers can convince users to install crafted plugins that write arbitrary files to paths outside the plugins directory, such as shell startup files, enabling code execution.