ZeroClaw vulnerabilities

CVEs whose affected-version data names the ZeroClaw package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101885High· 7.8PoC

yesterday

ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field

ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field. Attackers can convince users to install crafted plugins tha…

▾ Midnightzeroclaw-labs · ZeroClawEPSS 0.20%via NVD