Advisories · Technology
mf-yang openclaw-cn.
Every CVE that names mf-yang openclaw-cn among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following
- mf-yang openclaw-cn
- Path traversal
- CVSS 5.3 Medium
mf-yang openclaw-cn reply-elevated.ts isApprovedElevatedSender privileges management
- mf-yang openclaw-cn
- Privilege escalation
- CVSS 5.3 Medium
mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization
- mf-yang openclaw-cn
- Broken access control
- CVSS 5.3 Medium
mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery
- mf-yang openclaw-cn
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure
- mf-yang openclaw-cn
- Information disclosure
- Broken access control