Skip to content
OpenAdvisories

Package · Go

github.com/openclaw/crabbox

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-8621

    Crabbox < v0.12.0 Authentication Bypass via Header Spoofing

    Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organizations by spoofing identity headers. Attackers can inject malicious X-Crabbox-Owner and X-Crabbox-Org hea…

    OpenClaw crabbox github.com/openclaw/crabbox Go
  • High 7.1
    CVE-2026-45224

    Crabbox < 0.9.0 Path Traversal via Islo Provider Workspace Resolution

    Crabbox before 0.9.0 contains a path traversal vulnerability in the Islo provider's workspace path resolution that allows attackers to supply absolute or relative paths that resolve outside the intended /workspace directory. Attackers can craft a malicious .c…

    OpenClaw crabbox github.com/openclaw/crabbox Go