https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:50:33 +0000 https://vulnerability.circl.lu/vuln/brew-openclaw-cli-ghsa-x82f-27x3-q89c <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary A symlink-retarget TOCTOU race in `writeFileWithinRoot` could point an attacker-controlled path alias outside the configured root between resolution and write operations.</p> <p>### Impact Affected versions could cause out-of-root write side effects (including file creation or truncation) before final boundary validation.</p> <p>### Fix Root-scoped write flow now opens existing files without pre-truncation, creates missing files with exclusive create semantics, truncates only after post-open identity/boundary checks, and removes out-of-root artifacts when a race is detected.</p> <p>### Affected and Patched Versions - Affected: `&lt;= 2026.2.26` - Patched: `2026.3.1`</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary A symlink-retarget TOCTOU race in `writeFileWithinRoot` could point an attacker-controlled path alias outside the configured root between resolution and write operations.</p> <p>### Impact Affected versions could cause out-of-root write side effects (including file creation or truncation) before final boundary validation.</p> <p>### Fix Root-scoped write flow now opens existing files without pre-truncation, creates missing files with exclusive create semantics, truncates only after post-open identity/boundary checks, and removes out-of-root artifacts when a race is detected.</p> <p>### Affected and Patched Versions - Affected: `&lt;= 2026.2.26` - Patched: `2026.3.1`</p> https://vulnerability.circl.lu/vuln/brew-openclaw-cli-ghsa-x82f-27x3-q89c