All 5 CVE vulnerabilities found in openclaw-cn, with AI-generated Chinese analysis, references, and POCs.
Vendor: mf-yang
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-19008 | mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following CWE-59 | 6.3 | Medium | 2026-08-06 |
| CVE-2026-19007 | mf-yang openclaw-cn reply-elevated.ts isApprovedElevatedSender privileges management CWE-269 | 6.3 | Medium | 2026-08-06 |
| CVE-2026-19006 | mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization CWE-863 | 6.3 | Medium | 2026-08-06 |
| CVE-2026-17458 | mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery CWE-918 | 6.3 | Medium | 2026-07-26 |
| CVE-2026-17457 | mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure CWE-200 | 4.3 | Medium | 2026-07-26 |
All 5 known CVE vulnerabilities affecting openclaw-cn with full Chinese analysis, references, and POCs where available.