CVE-2026-108839 in thClaws
Summary
by MITRE • 10/11/2026
thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside the workspace by following symlinks. Attackers who plant a symlink under the allowed inputs/ prefix can cause later authenticated uploads to write or truncate files outside the workspace with daemon privileges.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 10/11/2026
The vulnerability identified in thClaws versions through 0.141.0 represents a critical path traversal and insecure link following flaw within its v1 API implementation, specifically affecting the post_inputs handler associated with the POST /v1/inputs endpoint. This security defect stems from an insufficient validation of file paths provided during input processing operations. When the application receives a request to process or store inputs, it fails to adequately verify that the target location resides strictly within the designated workspace directory structure. Instead, the software blindly trusts path components supplied by the client, allowing for the manipulation of relative and symbolic link references without proper sanitization checks.
The core technical flaw involves the lack of canonicalization before file system operations are executed. An attacker who possesses write access to a location under the allowed inputs/ prefix can plant a maliciously crafted symbolic link pointing to an arbitrary directory or file on the host operating system, such as /etc/passwd or critical application configuration files located outside the sandboxed workspace environment. Because thClaws operates with elevated daemon privileges to manage these input streams and processing tasks, any write operation directed through this symlink is executed with those high-level permissions rather than restricted user rights. This elevation of privilege during file I/O operations transforms a simple directory traversal into a severe system compromise vector.
The operational impact of this vulnerability is significant due to the combination of authentication requirements and elevated execution context. While an attacker must first authenticate to access the API, once authenticated, they can exploit the symlink following behavior to overwrite or truncate arbitrary files on the host machine with root-level privileges. This capability allows for complete system compromise, including the modification of system binaries, injection of malicious code into startup scripts, alteration of security configurations, and potential denial of service by corrupting essential data stores. The ability to write outside the workspace effectively breaks the isolation boundaries intended by the application's architecture, turning a contained processing environment into an unrestricted file manipulation tool for authenticated users.
This vulnerability aligns with CWE-59: Improper Link Resolution Before File Access, as it involves resolving symbolic links in a manner that allows access to unintended resources. Furthermore, from a tactical perspective, this behavior is consistent with ATT&CK technique T1083: File and Directory Discovery combined with T1222: File Permission Modification if the attacker uses the write capability to alter permissions for persistence or lateral movement. The exploitation chain relies on the application's failure to enforce strict path containment policies during input handling, a common oversight in applications that process user-supplied file paths without rigorous canonicalization and chroot-like restrictions.
Mitigation strategies must focus on enforcing strict directory confinement at both the operating system level and within the application logic. Administrators should immediately upgrade thClaws to version 0.142.0 or later, where this path validation issue has been addressed by implementing robust checks that resolve symbolic links before processing and ensure they remain within the allowed workspace boundaries. In environments where upgrading is not immediately feasible, deploying a file integrity monitoring solution can help detect unauthorized changes to critical system files resulting from exploitation attempts. Additionally, running the thClaws daemon with minimal necessary privileges using principles of least privilege will reduce the impact if an attacker manages to bypass application-level controls by limiting the scope of damage achievable through symlink following attacks.