Snyk Security Database

openclaw is a 🦞 OpenClaw — Personal AI Assistant

Affected versions of this package are vulnerable to Incorrect Authorization via reusable exec approvals that fail to bind the working directory context to the approval record. When an operator grants an allow-always approval for a command, the approval is matched solely on command arguments without recording the working directory, allowing an agent to reuse that approval to execute the same command in a different directory against files or repositories the operator never reviewed. The approved command can therefore produce materially different read or write effects than those the operator originally authorized.

sherpy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the caption cue text process. An attacker can execute arbitrary scripts in the context of the user's browser by injecting malicious content into closed captions.