CVE-2026-43989: JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a

JunoClaw, an agentic AI platform (a system where AI makes decisions and takes actions) built on Juno Network, had a vulnerability in its upload_wasm MCP tool (a component that lets the AI upload compiled code). The tool accepted file paths from the AI without checking if the path was valid, if it pointed to unintended locations through shortcuts, or if the file was the right type, allowing it to upload any file on the system. This was fixed in version 0.x.y-security-1.