CyberRota
Back to database

CVE-2026-43533

HIGH · CVSS 8.6 EPSS 0.06% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-05 · Last synced: 2026-06-04

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-43533
Severity
HIGH
CVSS
8.6
EPSS
0.06%

Original NVD Description

OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through outbound media handling.