// TAG

#RCE

Posts in this collection, ordered newest first.

202605.14

1-Day AnalysisMay 14, 20264 min read

Analyzes an authorization-bypass RCE in OpenClaw caused by failing to sanitize approval fields forwarded through node.invoke.

202605.13

1-Day AnalysisMay 13, 20264 min read

Analyzes a SandboxJS escape that bypasses shallow taint tracking and exposes the host Function constructor.

202605.09

1-Day AnalysisMay 09, 20262 min read

Analyzes a Langflow RCE caused by missing authentication on a public build API and passing attacker-controlled data to exec.