CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

EUVD-2026-87368

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...

PT-2026-99348

Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description An account enumeration issue exists in the login endpoint. Unauthenticated attackers can identify whether an email address is registered by analyzing the error location fields returned in the...

PT-2026-99382

Name of the Vulnerable Software and Affected Versions froxlor versions prior to 2.3.12 Description The software fails to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user password is changed. This allows attackers who possess hijacked sessions, valid API keys, or 2FA...

PT-2026-99188

Name of the Vulnerable Software and Affected Versions OpenClaw for iOS versions 2026.7.1 through 2026.8.10 Description The Control UI fails to enforce saved Gateway TLS pins. While native connections maintain the saved Gateway fingerprint, the authenticated Terminal and session Dashboard WebViews...

CVE-2026-100711: Insufficient Session Expiration

froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user password is changed. Attackers holding hijacked sessions, valid API keys, or 2FA trust tokens retain full account access after password rotation, bypassing incident response...

CVE-2026-85081: Improper Neutralization of Input During Web Page Generation

The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...

CVE-2026-100635: Cleartext Transmission of Sensitive Information

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid publish-visitor-session-id cookie from a Basic Auth exchange...

CVE-2026-100677: Generation of Error Message Containing Sensitive Information

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...

CVE-2026-100671: Exposure of Sensitive Information to an Unauthorized Actor

Grav is a flat-file CMS. In versions 2.0.19 through 2.0.24 — and in 2.0.0 through 2.0.18 and 1.7.x only where content Twig has been explicitly enabled — page content authored by a user holding only page-write permission is rendered through a Twig sandbox that allowlists getcookie, which returns a...

PT-2026-99306

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description An authentication bypass exists in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid...

PT-2026-99342

Name of the Vulnerable Software and Affected Versions Grav versions 1.7.x Grav versions 2.0.0 through 2.0.24 Description Page content created by a user with page-write permissions is rendered through a Twig sandbox that allowlists the get cookie function. This function returns any cookie sent wit...

PT-2026-99193

Name of the Vulnerable Software and Affected Versions openclaw versions 2026.5.2 through 2026.8.0 Description An incorrect authorization issue exists in WhatsApp group handling. A group sender who is permitted to send ordinary messages but is restricted by commands.allowFrom or owner command...

CVE-2026-100534: Authorization Bypass Through User-Controlled Key

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

PT-2026-99182

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1 Description Incorrect enforcement of sender tool policies occurs during session-memory filename generation. The process creates an embedded helper that retains tools previously removed by the originating...

CVE-2026-100535: Incorrect Authorization

OpenClaw npm package 'openclaw' versions = 2026.4.5 and 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender...

CVE-2026-100545: Incorrect Authorization

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100563: Improper Neutralization of Formula Elements in a CSV File

OpenClaw npm package openclaw before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or...

CVE-2026-100576: Server-Side Request Forgery (SSRF)

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...