High severity8.5NVD Advisory· Published May 12, 2026· Updated May 13, 2026
CVE-2026-43989
CVE-2026-43989
Description
JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is fixed in 0.x.y-security-1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <0.x.y-security-1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.