TI-2026-70739 CVE-2026-108839 · GHSA-8c39-3r7m-gwc4
Symlink following in thClaws allows writes outside the workspace
Priority LOW 12
thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside the workspace by following symlinks.