Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-16130
Received
More InfoOfficial Page
Source-cna@vuldb.com
View Known Exploited Vulnerability (KEV) details
Published At-18 Jul, 2026 | 18:16
Updated At-18 Jul, 2026 | 18:16

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of the file src/tools/builtin/path_utils.rs of the component write_file. The manipulation leads to link following. Local access is required to approach this attack. The exploit is publicly available and might be used. The identifier of the patch is 369ff3d240cf3c0787b50e1e9f182e1a06c71255. It is recommended to apply a patch to fix this issue.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.01.9LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary3.14.4MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Secondary2.03.2LOW
AV:L/AC:L/Au:S/C:N/I:P/A:P
Type: Secondary
Version: 4.0
Base score: 1.9
Base severity: LOW
Vector:
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Primary
Version: 3.1
Base score: 4.4
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Type: Secondary
Version: 2.0
Base score: 3.2
Base severity: LOW
Vector:
AV:L/AC:L/Au:S/C:N/I:P/A:P
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-59Primarycna@vuldb.com
CWE ID: CWE-59
Type: Primary
Source: cna@vuldb.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/nearai/ironclaw/cna@vuldb.com
N/A
https://github.com/nearai/ironclaw/commit/369ff3d240cf3c0787b50e1e9f182e1a06c71255cna@vuldb.com
N/A
https://github.com/nearai/ironclaw/issues/4797cna@vuldb.com
N/A
https://github.com/nearai/ironclaw/pull/4869cna@vuldb.com
N/A
https://vuldb.com/cve/CVE-2026-16130cna@vuldb.com
N/A
https://vuldb.com/submit/856883cna@vuldb.com
N/A
https://vuldb.com/vuln/379848cna@vuldb.com
N/A
https://vuldb.com/vuln/379848/cticna@vuldb.com
N/A
Hyperlink: https://github.com/nearai/ironclaw/
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/nearai/ironclaw/commit/369ff3d240cf3c0787b50e1e9f182e1a06c71255
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/nearai/ironclaw/issues/4797
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/nearai/ironclaw/pull/4869
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/cve/CVE-2026-16130
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/submit/856883
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/379848
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/379848/cti
Source: cna@vuldb.com
Resource: N/A
Change History
0Changes found

Details not found