CVE-2026-32232 in zeptoclaw

Sumário

de MITRE • 12/03/2026

ZeptoClaw is a personal AI assistant. Prior to 0.7.6, there is a Dangling Symlink Component Bypass, TOCTOU Between Validation and Use, and Hardlink Alias Bypass. This vulnerability is fixed in 0.7.6.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsável: GitHub M
• Reservar: 11/03/2026
• Divulgação: 12/03/2026
• Moderação: aceite
• Entrada: VDB-350766
• CPE: pronto
• CWE: CWE-22 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.00618
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-32232
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-32232
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-32232/