Description
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component apply_patch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-06
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in the apply_patch tool of mf-yang's openclaw-cn, specifically in the assertNoSymlinkEscape function in sandbox-paths.ts. The flaw allows an attacker to craft paths containing symbolic links that traverse outside the intended sandbox, resulting in link following and unauthorized file access or modification. The vulnerability maps to CWE‑59 and can enable data disclosure or integrity compromise.

Affected Systems

Affected product: mf-yang:openclaw-cn (openclaw‑cn), versions up to and including 0.2.1. No further version information is provided. Users running 0.2.1 or earlier must watch for updates.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity. EPSS is not available and the vulnerability is not listed in CISA KEV. It is remotely accessible; public proof‑of‑concept exploits exist. With no current vendor patch or workaround, the risk remains until mitigation steps are applied.

Generated by OpenCVE AI on August 6, 2026 at 09:30 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to a version newer than 0.2.1 when it becomes available.
  • Restrict network access to the apply_patch tool so only trusted hosts can invoke it.
  • Validate all input paths on the local side, ensuring symbolic links cannot escape the intended sandbox directory.

Generated by OpenCVE AI on August 6, 2026 at 09:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 06 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 06 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component apply_patch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Title mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following
First Time appeared Mf-yang
Mf-yang openclaw-cn
Weaknesses CWE-59
CPEs cpe:2.3:a:mf-yang:openclaw-cn:*:*:*:*:*:*:*:*
Vendors & Products Mf-yang
Mf-yang openclaw-cn
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Mf-yang Openclaw-cn
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-06T17:31:50.480Z

Reserved: 2026-08-05T20:04:01.098Z

Link: CVE-2026-19008

cve-icon Vulnrichment

Updated: 2026-08-06T17:24:59.442Z

cve-icon NVD

Status : Deferred

Published: 2026-08-06T08:16:30.087

Modified: 2026-08-12T20:59:00.027

Link: CVE-2026-19008

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-06T09:45:03Z

Weaknesses
  • CWE-59

    Improper Link Resolution Before File Access ('Link Following')