A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of the file src/tools/builtin/path_utils.rs of the component write_file. The manipulation leads to link following. Local access is required to approach this attack. The exploit is publicly available and might be used. The identifier of the patch is 369ff3d240cf3c0787b50e1e9f182e1a06c71255. It is recommended to apply a patch to fix this issue.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Nearai |
|
No data.
No data.
No data.
References
History
Sat, 18 Jul 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of the file src/tools/builtin/path_utils.rs of the component write_file. The manipulation leads to link following. Local access is required to approach this attack. The exploit is publicly available and might be used. The identifier of the patch is 369ff3d240cf3c0787b50e1e9f182e1a06c71255. It is recommended to apply a patch to fix this issue. | |
| Title | nearai ironclaw write_file path_utils.rs validate_path link following | |
| First Time appeared |
Nearai
Nearai ironclaw |
|
| Weaknesses | CWE-59 | |
| CPEs | cpe:2.3:a:nearai:ironclaw:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Nearai
Nearai ironclaw |
|
| References |
|
|
| Metrics |
cvssV2_0
|
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2026-07-18T17:15:10.968Z
Reserved: 2026-07-17T16:16:09.661Z
Link: CVE-2026-16130
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.