Vulnerability · Published Mar 3, 2026 · Assigned by VulDB
CVE-2025-12345LLM-Claw Agent Deployment initiate.c agent_deploy_init buffer overflow
High 8.8
In plain English
A high-severity buffer overflow in LLM-Claw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.7%top 47.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1. The affected element is the function agent_deploy_init of the file /agents/deploy/initiate.c of the component Agent Deployment. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. A patch should be applied to remediate this issue.
Affected products (as reported)
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
References
- VDB-348531 | LLM-Claw Agent Deployment initiate.c agent_deploy_init buffer overflow vdb-entry, technical-description
- VDB-348531 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required