VYPR

zeroclaw

by Zeroclaw Labs

CVEs (1)

  • CVE-2026-101885HigSep 30, 2026
    risk 0.44cvss 7.8epss —

    ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field. Attackers can convince users to install crafted plugins that write arbitrary files to paths outside…