CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

osv_cve•added 2026/09/26 2:18 a.m.•18 views

CVE-2026-100553 OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin

OpenClaw versions = 2026.6.9 and 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, so unpin requests can bypass the shared same-provider cross-context target check. When tools.message.crossContext.allowWithinProvider is disabled, an admitted...

5.3CVSS5.8AI score

SaveExploits0References4

Vulnrichment•added 2026/09/26 2:18 a.m.•10 views

CVE-2026-100553 OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin

5.3CVSS5.8AI score0.00215EPSS

SaveExploits0References2

CVE•added 2026/09/26 2:18 a.m.•21 views

CVE-2026-100553

OpenClaw versions >= 2026.6.9 and

5.3CVSS5.8AI score0.00215EPSS

SaveExploits0References2

Cvelist•added 2026/09/26 2:18 a.m.•47 views

CVE-2026-100553 OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin

5.3CVSS0.00215EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by