CVE-2026-8113— 8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8113
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f. Affected by this vulnerability is the function isPathInside of the file src/kernel.ts of the component executeSkillScript. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. This patch is called e8bd4e17e9428260f2161378356affc5ce90d6ed. It is advisable to implement a patch to correct this issue.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
MiniClaw 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MiniClaw是8421bit个人开发者的一款AI的记忆与进化工具。 MiniClaw存在路径遍历漏洞，该漏洞源于组件executeSkillScript中文件src/kernel.ts的函数isPathInside，可能导致路径遍历攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-8113
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8113
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-22
- CVE-2026-44647
OneDev: Path Traversal (read capability via Git LFS pointer - CVE-2026-27886
Strapi may leak sensitive data via relational filtering due - CVE-2026-42598
Pode: Directory Traversal is possible on Static Routes - CVE-2026-44542
FileBrowser Quantum: Unauthenticated Path Traversal in Publi - CVE-2026-42593
Gotenberg: Arbitrary PDF read via stampExpression and waterm
V. Comments for CVE-2026-8113
No comments yet