Clawed and Dangerous: Can We Trust Open Agentic Systems?

Open agentic systems combine LLM-based planning with external capabilities, persistent memory, and privileged execution. They are used in coding assistants, browser copilots, and enterprise automation. OpenClaw is a visible instance of this broader class. Without much attention yet, their securit...

Wazuh 代码注入漏洞

Wazuh is an open-source application developed by Wazuh. It is used for collecting, summarizing, indexing, and analyzing security data, helping organizations detect intrusions, threats, and abnormal behaviors. There is a code injection vulnerability in versions 2.1.0 before 4.8.0 of Wazuh Agent an...

CVE-2026-29871

The CVE-2026-29871 affects the Beifong AI News and Podcast Agent backend (FastAPI) in the stream_audio endpoint (routers/podcast_router.py) of the awesome-llm-apps project. The vulnerability arises from a user-controlled path parameter that is concatenated into a filesystem path without proper va...

GHSA-7XR2-Q9VF-X4R5 OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)

Summary The patch for CVE-2026-32013 introduced symlink resolution and workspace boundary enforcement for agents.files.get and agents.files.set. However, two other handlers in the same file agents.create and agents.update still use raw fs.appendFile on the IDENTITY.md file without any symlink...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the actioner process. An attacker can execute arbitrary system commands by sending specially crafted requests to the metadata service endpoint. Remediation There is no fixed version for...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the actioner process. An attacker can execute arbitrary system commands by sending specially crafted requests to the metadata service endpoint. Remediation There is no fixed version for...

GO-2026-4854 DigitalOcean Droplet Agent: Command Injection via Metadata Service Endpoint in github.com/digitalocean/droplet-agent

DigitalOcean Droplet Agent: Command Injection via Metadata Service Endpoint in github.com/digitalocean/droplet-agent...

GO-2026-4725 Mattermost fails to properly validate User-Agent header tokens in github.com/mattermost/mattermost-server

Mattermost fails to properly validate User-Agent header tokens in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35643 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35660 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

GHSA-WQ58-2PVG-5H4F OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers

Summary Before v2026.3.23, the Gateway agent RPC accepted /reset and /new for callers with only operator.write, even though the direct sessions.reset RPC correctly requires operator.admin. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.23 - Latest released tag checked:...

OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers

Summary Before v2026.3.23, the Gateway agent RPC accepted /reset and /new for callers with only operator.write, even though the direct sessions.reset RPC correctly requires operator.admin. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.23 - Latest released tag checked:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35660 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35634 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35618 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the RMI integration. An attacker can execute arbitrary code with the privileges of the user running the instrumented JVM by sending specially crafted serialized data to a network-exposed JMX or RMI...

GHSA-H8W2-RV57-VC6F splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution

In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. An attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this to potentially achieve remote code execution. Al...

dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution

In versions of dd-trace-java prior to 1.60.3, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this ...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the RMI integration. An attacker can execute arbitrary code with the privileges of the user running the instrumented JVM by sending specially crafted serialized data to a network-exposed JMX or RMI...

EUVD-2026-16214

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...