netease-youdao LobsterAI

• CVE-2026-112014 Medium 5.5 LobsterAI before 2026.10.16 Hardcoded Password in Provider API Key Export 0.1%
• CVE-2026-108156 High 7.1 LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json 0.2%
• CVE-2026-90818 Medium 4.3 netease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgery 0.5%
• CVE-2026-18995 Medium 4.3 netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure 0.5%