Eric-H

**Name of the Vulnerable Software and Affected Versions** zevorn rt-claw versions prior to 0.2.1 **Description** A code injection flaw exists in the Telegram-to-AI Tool Execution Flow component. The issue resides in the `tool run script execute()` function within the `claw/services/tools/script.c` file. A remote attacker can manipulate the system to inject and execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `tool run script execute()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** louisho5 picobot versions prior to 0.2.1 **Description** An OS command injection issue exists within the `ExecTool.Execute()` function located in the `internal/agent/tools/exec.go` file of the exec Tool component. This flaw allows for the execution of arbitrary operating system commands, though it requires a local approach to exploit. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `ExecTool.Execute()` function.

**Name of the Vulnerable Software and Affected Versions** louisho5 picobot versions prior to 0.2.1 **Description** A remote attacker can trigger server-side request forgery (SSRF) by manipulating the `url` argument within the `WebTool.Execute()` function located in the internal/agent/tools/web.go file of the web Tool component. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `WebTool.Execute()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GoClaw versions prior to 3.11.4 **Description** An issue in the Webhook Verification Handler component allows for missing authentication. This occurs within the `resolveAuth()` function located in the `internal/http/auth.go` file, enabling remote exploitation. **Recommendations** Update to version 3.11.4 or later. As a temporary workaround, restrict access to the `resolveAuth()` function in the Webhook Verification Handler.

**Name of the Vulnerable Software and Affected Versions** GoClaw versions prior to 3.11.4 **Description** A weakness in the Team Task Completion Handler component allows for missing authorization. This issue occurs within the `TeamTasksTool.executeComplete()` function located in the `internal/tools/team tasks lifecycle.go` file. A remote attacker can exploit this flaw by executing a manipulation to bypass authorization controls. **Recommendations** Update to version 3.11.4 or later. As a temporary workaround, restrict access to the `TeamTasksTool.executeComplete()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** hermes-agent versions prior to 2026.4.17 **Description** A flaw in the Batch Runner component of NousResearch hermes-agent allows for remote manipulation. The issue resides in the `check all command guards()` function within the `tools/approval.py` file, which can lead to missing authorization. **Recommendations** Update to a version later than 2026.4.16. As a temporary workaround, restrict access to the `check all command guards()` function in the `tools/approval.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 2026.4.17 **Description** A flaw in the `read file` Tool within the `tools/file tools.py` file affects the ` is blocked device()` function. This issue allows a remote attacker to perform a path traversal, which is a technique used to access files and directories that are stored outside the intended folder. **Recommendations** Update to a version later than 2026.4.16. As a temporary workaround, restrict access to the `read file` Tool or the ` is blocked device()` function until the update is applied.