Vulnerabilities

TI-2026-15534 CVE-2026-19008 · GHSA-2mj8-f2gc-5q5j

mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following

MEDIUM 57

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00435 Published 2026-08-06 No fix listed CWE-59

TI-2026-15533 CVE-2026-19007 · GHSA-f57q-9mhr-fhmm

MEDIUM 57

A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-06 No fix listed CWE-266

TI-2026-15532 CVE-2026-19006 · GHSA-p2px-f69r-9h28

MEDIUM 57

A vulnerability was found in mf-yang openclaw-cn 2026.2.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-06 No fix listed CWE-285

TI-2026-14337 CVE-2026-17458 · GHSA-5q2x-g6w4-m2qg

MEDIUM 57

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00398 Published 2026-07-26 No fix listed CWE-918

TI-2026-14336 CVE-2026-17457 · GHSA-wx37-g239-qv72

MEDIUM 57

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00419 Published 2026-07-26 No fix listed CWE-200