mf-yang openclaw-cn

• CVE-2026-19008 Medium 6.3 mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following 0.4%
• CVE-2026-19007 Medium 6.3 mf-yang openclaw-cn reply-elevated.ts isApprovedElevatedSender privileges management 0.4%
• CVE-2026-19006 Medium 6.3 mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization 0.4%
• CVE-2026-17458 Medium 6.3 mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery 0.4%
• CVE-2026-17457 Medium 4.3 mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure 0.4%