CVE-2026-101885

Summary

ZeroClaw versions before 0.8.5 with the plugins-wasm feature allow attackers to install crafted plugins that can write arbitrary files to paths outside the plugins directory, leading to potential code execution.

Exploitability

Exploitation requires convincing users to install a crafted plugin. The attacker must have the ability to deliver and install the plugin.

Blast radius

If exploited, attackers could gain code execution capabilities, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to ZeroClaw 0.8.5 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.