Vulnerability · Published May 12, 2026 · Assigned by GitHub_M
CVE-2026-43989JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation
High 8.5
In plain English
A high-severity improper input validation in junoclaw from Dragonmonk111. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)8.5High
Exploit odds (30 days)0.1%top 96.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is fixed in 0.x.y-security-1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dragonmonk111 | junoclaw | < v0.x.y-security-1 |
Weakness: CWE-20, CWE-22, CWE-59, CWE-73 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
References
- https://github.com/Dragonmonk111/junoclaw/security/advisories/GHSA-rw59-34hw-pmwp x_refsource_CONFIRM
- https://github.com/Dragonmonk111/junoclaw/commit/a7886cd x_refsource_MISC
- https://github.com/Dragonmonk111/junoclaw/releases/tag/v0.x.y-security-1 x_refsource_MISC