JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation
Priority LOW 36CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is fixed in 0.x.y-security-1.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00147 3rd percentileScored 2026-11-07
Fix Fixed junoclaw (Dragonmonk111): v0.x.y-security-1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dragonmonk111 | junoclaw | before v0.x.y-security-1 | v0.x.y-security-1 | Patch available | CNA |
- junoclaw VendorDragonmonk111 Affected before v0.x.y-security-1 Fixed in v0.x.y-security-1 Patch available CNA
Remediation
- Fix · CNA junoclaw (Dragonmonk111) Fixed in v0.x.y-security-1
Timeline
- 2026-10-02 Threatist record created from CVE-2026-43989
References
More Dragonmonk111 vulnerabilities
- TI-2026-32035 JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter CVSS 3.1CRITICAL 9.8
- TI-2026-32034 JunoClaw: plugin-shell shell-injection bypass via substring blocklist CVSS 3.1HIGH 8.4
- TI-2026-32033 JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper CVSS 3.1HIGH 8.4
- TI-2026-32036 JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access CVSS 3.1HIGH 8.2
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences