2026

OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8

OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that al

OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-ho

OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authen

OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit b

OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment-variable

OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inher

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within

OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications i

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that all

OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in

OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authori

OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feis

OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration.

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filena

OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential exposure issue in memory emb

OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2),

OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime v

OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during session-memory filena

OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it f

OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySen

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attacke

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Uni

The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when

OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always ap

OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In

OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthent

OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped medi

The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce t

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager that allows attacker

Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect parameter

Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php where the lng parameter is

Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter t

Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when d

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a l

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen

Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handlers in recruitment/views/

Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently autho

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attacker

Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api

Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matc

php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS

When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authori

phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 oc

RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages i

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is und

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redi