Lucene search
+L

21 matches found

OSV
OSV
added 2026/02/19 10:55 p.m.6 views

CVE-2026-26326 OpenClaw skills.status could leak secrets to operator.read clients

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for skill requires.config paths. Version 2026.2.14 stops including raw resolved config values in requirement check...

5.3CVSS5.6AI score0.00303EPSS
SaveExploits0References6
Rows per page
Query Builder