Sean Nejad

**Name of the Vulnerable Software and Affected Versions** Ghidra versions prior to 12.1 **Description** BSim filter types concatenate user-supplied values directly into SQL queries without escaping or parameterization, leading to a SQL injection. This allows remote attackers to inject arbitrary SQL via the BSim network query protocol to read, modify, or delete data within the PostgreSQL database. **Recommendations** Update to version 12.1 or later.

**Name of the Vulnerable Software and Affected Versions** Ghidra versions 11.0 through 12.0 **Description** A SQL injection issue exists in the `changePassword()` function of the PostgresFunctionDatabase. The system fails to escape double quotes in usernames that are interpolated into ALTER ROLE statements. Authenticated attackers can exploit this by sending crafted username parameters within PasswordChange network messages to execute arbitrary SQL commands, allowing them to escalate privileges to PostgreSQL superuser and obtain full control of the database. **Recommendations** Update to version 12.1. As a temporary workaround, restrict access to the `changePassword()` function within the PostgresFunctionDatabase to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Ghidra versions prior to 12.1 **Description** An authentication bypass exists in the `PKIAuthenticationModule.authenticate()` function. This issue allows any user possessing a valid CA-signed certificate to impersonate other users by presenting their public certificate with a null signature. Successful exploitation can lead to privilege escalation, modification of repository access controls, exfiltration of shared reverse engineering databases, and permanent compromise of server integrity. **Recommendations** Update to version 12.1 or later. As a temporary workaround, restrict the use of the `PKIAuthenticationModule.authenticate()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Ghidra versions prior to 12.2 **Description** The IsfServer accepts TCP connections and passes client-supplied namespace strings directly to filesystem operations without validation, leading to an unauthenticated path traversal. Remote attackers can connect to port '54321' and send crafted protobuf messages containing traversal sequences to enumerate filesystem paths and probe arbitrary files. **Recommendations** Update to version 12.2 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.2.23 **Description** OpenClaw versions prior to 2026.2.23 contain an HTML injection issue in the HTML session exporter. This allows attackers to execute arbitrary JavaScript by injecting malicious `mimeType` values in image content blocks. Attackers can craft session entries with specially designed `mimeType` attributes that escape the `img src` data-URL context, leading to cross-site scripting (XSS) when the exported HTML is opened. The issue resides in the `src/auto-reply/reply/export-html/template.js` file, specifically at lines 1032 and 1306, where the `img.mimeType` is interpolated directly into `<img src="data:...">` attributes without proper validation or escaping. A crafted `mimeType` value, such as `x" onerror="alert(1)"`, can break out of the attribute context and execute arbitrary JavaScript. The vulnerability requires the attacker to control image entries in session data. **Recommendations** Versions prior to 2026.2.23 are affected. Update to version 2026.2.23 or later, which includes a `sanitizeImageMimeType()` helper function that validates `mimeType` against a whitelist of known image MIME types and falls back to `application/octet-stream` for unrecognized values, preventing attribute breakout.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.2.19 **Description** OpenClaw contains a path traversal issue in the Feishu media download process. Untrusted media keys are directly used in constructing temporary file paths within the `extensions/feishu/src/media.ts` file. An attacker controlling the Feishu media key values returned to the client can utilize traversal segments to bypass the `os.tmpdir()` directory and write arbitrary files with the permissions of the OpenClaw process. The issue stems from the direct interpolation of untrusted input (`imageKey` / `fileKey`) into file paths. This allows for manipulation of the path, potentially leading to file writes outside the intended temporary directory. **Recommendations** Update OpenClaw to version 2026.2.19 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions 2026.2.6 through 2026.2.17 **Description** The software constructs RegExp objects directly from unescaped Feishu mention metadata within the `stripBotMention` function. This allows for potential regex injection and denial of service. Attackers can craft patterns with nested quantifiers or metacharacters in mention metadata to trigger catastrophic backtracking, potentially blocking message processing or removing unintended content before model processing. The vulnerable code resides in the `extensions/feishu/src/bot.ts` file, specifically when creating a `new RegExp()` from `mention.name` and `mention.key` without proper escaping of regex metacharacters. **Recommendations** OpenClaw versions 2026.2.6 through 2026.2.17 should be updated to version 2026.2.19 or later.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.2.19 OpenClaw versions 2026.2.17 and earlier **Description** OpenClaw versions prior to 2026.2.19 contain a command injection issue in the Lobster extension tool execution. This occurs due to the use of a Windows shell fallback mechanism with `shell: true` after process creation failures. Attackers can inject shell metacharacters into command arguments, potentially executing arbitrary commands when the subprocess launch fails with `EINVAL` or `ENOENT` errors. The issue resides in the `extensions/lobster/src/lobster-tool.ts` file, where the tool retries subprocess launch with `shell: true` on Windows for specific errors. The fix removes the shell fallback and uses explicit executable/script argv execution. **Recommendations** OpenClaw versions prior to 2026.2.19 should be updated to version 2026.2.19 or later.