Description
ZeptoClaw is a personal AI assistant. Prior to 0.7.6, there is a Dangling Symlink Component Bypass, TOCTOU Between Validation and Use, and Hardlink Alias Bypass. This vulnerability is fixed in 0.7.6.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| qhkm | zeptoclaw | < 0.7.6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | zeptoclaw | < 0.7.6 | 0.7.6 | GHSA-2m67-cxxq-c3h8 |