CVE-2026-100594

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the /export-trajectory endpoint. Due to insufficient authorization checks, non-owner senders can request and receive owner-only trajectory bundles. This allows attackers to access sensitive data from affected sess...

CVE-2026-100594

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and receive owner-only trajectory bundles. Attackers can access prompts, model messages, tool schemas, runtime events, and local path metadat...

CVE-2026-100564

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

EUVD-2026-87486

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100564

Versions of OpenClaw before 2026.8.1 are vulnerable to CSV Formula Injection . The root cause is a failure to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with the permissions of the spre...

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100563

OpenClaw npm package "openclaw" before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label ...

CVE-2026-100563 OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels

OpenClaw npm package openclaw before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or...

CVE-2026-100563 OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels

OpenClaw npm package openclaw before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or...

CVE-2026-100563 OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels

OpenClaw npm package openclaw before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or...

EUVD-2026-87487

OpenClaw npm package openclaw before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or...

CVE-2026-100563

The OpenClaw npm package (openclaw) before version 2026.8.1 is vulnerable to CSV formula injection . The flaw exists because the Control UI fails to neutralize leading characters interpreted as formulas when exporting session data to CSV. A low-trust participant can influence session labels or th...

CVE-2026-100595: Exposure of Sensitive Information to an Unauthorized Actor

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and...

CVE-2026-100694: Improper Neutralization of Input During Web Page Generation

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export blocks and @@html:...@@ snippets pass HTML through unescaped, resulting in cross-site scripting XSS in the generated site...

PT-2026-99230

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description An authorization bypass exists in the '/export-trajectory' endpoint, allowing non-owner senders to request and receive trajectory bundles intended only for the owner. This occurs due to...

CVE-2026-100564: Improper Neutralization of Formula Elements in a CSV File

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

PT-2026-99231

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description An authorization bypass exists in the diagnostics export command. This flaw allows non-owner channel senders to access host diagnostic bundles reserved for owners, enabling them to request and...

PT-2026-99365

Name of the Vulnerable Software and Affected Versions Hugo versions 0.56.0 through 0.165.x Description Content files mapped to the text/org media type are rendered without escaping raw HTML. Specifically, Org export blocks and @@html:...@@ snippets allow HTML to pass through unescaped, leading to...