Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2026/09/26 2:18 a.m.•50 views

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

5.4CVSS0.00188EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/26 2:18 a.m.•14 views

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

5.4CVSS5.9AI score0.00188EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/26 2:18 a.m.•16 views

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

5.3CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder