Skip to content
OpenAdvisories

Vendor

thClaws

1 known vulnerabilities.

Products

thClaws 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-108839

    thClaws through 0.141.0 Symlink Following File Write via POST /v1/inputs

    thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside the workspace by following symlinks. Attackers who plant a symlink under the allowed inputs/ prefix ca…

    thClaws thClaws