Eric-B

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw version 3.13.3-beta.3 **Description** A path traversal issue exists in the ACP ToolBridge Workspace Handler component. A remote attacker can exploit this by manipulating the `writeFile()` function within the `internal/providers/acp/tool bridge.go` file. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `writeFile()` function in the ACP ToolBridge Workspace Handler.

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw version 3.11.3 **Description** A remote attack is possible due to an issue in the `ExecApprovalManager.CheckCommand()` function within the internal/tools/exec approval.go file. This flaw allows for the manipulation of the blacklist, resulting in an incomplete blacklist that can be bypassed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `ExecApprovalManager.CheckCommand()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw version 3.13.3-beta.3 **Description** An issue exists in the `invoke` endpoint within the `bytePlusDownloadVideo()` function of the `internal/tools/create video byteplus.go` file. Manipulation of the `output.video url` variable allows for server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. This flaw can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `invoke` endpoint or avoid using the `output.video url` parameter.

**Name of the Vulnerable Software and Affected Versions** poco-ai poco-claw versions prior to 0.5.5 **Description** A flaw in the Workspace API component allows a remote attacker to bypass authorization. The issue exists in the `get workspace file()` function within the file `executor manager/app/api/v1/workspace.py`. By manipulating the `user id` variable, an attacker can gain unauthorized access. **Recommendations** Update poco-ai poco-claw to version 0.5.5 or later. As a temporary mitigation, restrict access to the `user id` parameter in the affected API endpoint.

**Name of the Vulnerable Software and Affected Versions** mosaxiv clawlet versions prior to 0.2.11 **Description** The File Tools component contains an issue where the `read file()`, `write file()`, and `edit file()` functions in the `tools/fs ops.go` file are susceptible to link following. This occurs when a local attacker performs a manipulation that allows the application to follow symbolic links to unauthorized locations. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** mosaxiv clawlet versions prior to 0.2.11 **Description** A remote server-side request forgery (SSRF) exists in the `tools.webFetch()` function within the `tools/tool web fetch.go` file. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the `tools.webFetch()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** mosaxiv clawlet versions prior to 0.2.11 **Description** A server-side request forgery (SSRF) exists in the IPv4 Handler component. This occurs when the `url` argument is manipulated within the `web fetch()` function located in the tools/tool web fetch.go file, allowing a remote attacker to initiate unauthorized requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `web fetch()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** mosaxiv clawlet versions prior to 0.2.11 **Description** A flaw in the exec Safety Guard component allows for a protection mechanism failure. The issue resides in the `guardExecCommand()` function within the tools/tool exec.go file and can be triggered remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `guardExecCommand()` function.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 0.12.1 **Description** An authorization bypass exists in the resume endpoint. The issue occurs within the `resolve session by title()` function located in the `hermes state.py` file. A remote attacker can manipulate the `Title` argument to bypass authorization mechanisms. **Recommendations** Update to a version later than 0.12.0. As a temporary workaround, restrict access to the resume endpoint or avoid using the `Title` argument in that endpoint until the update is applied.

**Name of the Vulnerable Software and Affected Versions** GoClaw versions prior to 3.11.4 **Description** A server-side request forgery (SSRF) exists in the TTS Configuration Endpoint. This issue occurs within the `Import()` function of the `internal/http/tts config.go` file, allowing a remote attacker to manipulate requests. SSRF is a flaw where an attacker can force a server to make requests to an unintended location. **Recommendations** Update to version 3.11.4 or later. As a temporary workaround, restrict access to the `Import()` function within the TTS Configuration Endpoint.

**Name of the Vulnerable Software and Affected Versions** unitedbyai droidclaw versions prior to 0.5.4 **Description** An issue exists in the claim Endpoint within the file `server/src/routes/pairing.ts` where an unknown function fails to properly restrict excessive authentication attempts. This allows for a remote attack, although it is characterized by high complexity and difficult exploitability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw versions prior to 3.11.4 **Description** A flaw in the RoleAdmin Gateway component allows for improper privilege management. The issue resides within the `handleSave()` function located in the `internal/http/tts config.go` file, which can be exploited remotely. **Recommendations** Update to a version later than 3.11.3. As a temporary workaround, restrict access to the `handleSave()` function in the `internal/http/tts config.go` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GoClaw versions prior to 3.11.4 **Description** Remote OS command injection is possible through the manipulation of the `FsBridge.WriteFile()` function within the `internal/sandbox/fsbridge.go` file of the `write file` Tool component. **Recommendations** Update to a version later than 3.11.3. As a temporary workaround, restrict the use of the `FsBridge.WriteFile()` function until the fix is officially accepted and released.

**Name of the Vulnerable Software and Affected Versions** GoClaw versions prior to 3.11.4 **Description** Improper authorization occurs in the `auth()` function within the `internal/http/evolution handlers.go` file. This flaw allows a remote attacker to bypass authorization mechanisms. **Recommendations** Update to a version later than 3.11.3. As a temporary workaround, restrict access to the `auth()` function in the `internal/http/evolution handlers.go` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** fishaudio Bert-VITS2 versions up to 8f7fbd8c4770965225d258db548da27dc8dd934c **Description** A path traversal issue exists in the Gradio Interface component. A remote attacker can manipulate the `data dir` argument within the `generate config()` function of the `webui preprocess.py` file to access files and directories outside the intended folder. **Recommendations** Update fishaudio Bert-VITS2 to a version later than 8f7fbd8c4770965225d258db548da27dc8dd934c. As a temporary workaround, restrict access to the `generate config()` function in `webui preprocess.py` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** fishaudio Bert-VITS2 versions prior to 8f7fbd8c4770965225d258db548da27dc8dd934c **Description** A path traversal flaw exists in the Model Handler component, specifically within the ` get all models()` function of the `hiyoriUI.py` file. This issue allows a remote attacker to manipulate file paths to access unauthorized directories. **Recommendations** Update fishaudio Bert-VITS2 to a version later than 8f7fbd8c4770965225d258db548da27dc8dd934c. As a temporary workaround, restrict access to the ` get all models()` function in the `hiyoriUI.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** adenhq hive versions prior to 0.11.0 **Description** A path traversal issue exists in the Delete Request Handler component. A remote attacker can perform a manipulation affecting the ` read events tail()` function within the `core/framework/server/routes sessions.py` file, allowing unauthorized access to the file system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the ` read events tail()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** VectifyAI PageIndex versions prior to f50e52975313c6716c02b20a119577a1929decba **Description** A security flaw in the PDF Table of Contents Handler component allows a remote attacker to trigger an infinite loop. This issue occurs within the `toc transformer()` function located in the `pageindex/page index.py` file. **Recommendations** Update to a version later than f50e52975313c6716c02b20a119577a1929decba. As a temporary workaround, consider restricting the use of the `toc transformer()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59 **Description** A flaw in the `cheshire cat core` component, specifically within the `recall relevant memories to working memory()` function located in the `core/cat/looking glass/stray cat.py` file, allows for remote exploitation. This issue leads to excessive resource consumption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `recall relevant memories to working memory()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ChatGPTNextWeb NextChat versions prior to 2.16.2 **Description** A server-side request forgery (SSRF) exists in the Artifacts Endpoint component. The issue resides in the `storeUrl()` function within the `app/api/artifacts/route.ts` file, where improper manipulation of the `ID` argument allows a remote attacker to initiate unauthorized requests from the server. **Recommendations** Update to a version later than 2.16.1. As a temporary workaround, restrict access to the `storeUrl()` function in the `app/api/artifacts/route.ts` file to minimize the risk of exploitation.