openclaw-cn vulnerabilities

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1 in the assertNoSymlinkEscape function of src/agents/sandbox-paths.ts, in the apply_patch Tool component. The issue is link following. The attack can be launched remotely. The exploit is public. The project was informed but has not responded.

A vulnerability in mf-yang openclaw-cn up to 0.2.1 affects the function isApprovedElevatedSender in src/auto-reply/reply/reply-elevated.ts, causing improper privilege management. Remote exploitation is possible and the exploit is public.

A vulnerability in mf-yang openclaw-cn 2026.2.5 affects an unknown part of src/agents/bash-tools.exec.ts in the Ggateway Exec Approval Flow, leading to incorrect authorization. Remote attack is possible and exploit is public.

A vulnerability in openclaw-cn up to version 0.2.1 allows Server-Side Request Forgery (SSRF) via the clickViaPlaywright function in agent.act.ts. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability in openclaw-cn up to version 0.2.1 allows information disclosure via the assertBrowserNavigationAllowed function in navigation-guard.ts. Manipulation of the url argument leads to data leakage. The attack can be performed remotely and the exploit has been publicly disclosed.