CVE-2026-100526 Vulnerability in discord

OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...

CVE-2026-100526 Vulnerability in discord

OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...

PT-2026-99222

Name of the Vulnerable Software and Affected Versions OpenClaw Codex versions prior to 2026.7.1 Description Insufficient owner authorization enforcement occurs during the creation of native conversation bindings. This allows non-owner channel senders who possess command access to establish bindin...

CVE-2026-100589: Incorrect Authorization

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

PT-2026-99231

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description An authorization bypass exists in the diagnostics export command. This flaw allows non-owner channel senders to access host diagnostic bundles reserved for owners, enabling them to request and...

PT-2026-99225

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description A sandbox bypass exists in the browser tool that allows sandboxed sessions to access paired node browser actions, even when the allowHostControl variable is set to false. An attacker who controls...

CVE-2026-100536: Improper Limitation of a Pathname to a Restricted Directory

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause...

CVE-2026-100597: Time-of-check Time-of-use (TOCTOU) Race Condition

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

openSUSE 16 Security Update : gitoxide (openSUSE-SU-2026:21955-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21955-1 advisory. Changes in gitoxide: - CVE-2026-91986: gix-transport CR/LF/NUL injection into git-daemon connect request via crafted git URL path, allowing virtual-host...

SUSE CVE-2026-96748

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

CVE-2026-100417 RustDesk before 1.5.0 One-Way File Transfer Bypass

RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host clipboard. Attackers can send FormatDataRequest and FileContentsRequest messages to retrieve copied files by guessing t...

CVE-2026-94445

Independent deployments of golang.org/x/playground are vulnerable to Remote Code Execution (RCE) due to a combination of two flaws. A malicious txtar can escape its execution context to perform arbitrary writes to the playground host's trusted filesystem. Concurrently, a failure to restrict the e...

EUVD-2026-87201

A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths to invoke go vet on the playground host did not correctly restrict the execution environment. This permitted a Go proce...

CVE-2026-96812

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

fast-uri: fast-uri: Security bypass due to inconsistent host case normalization

A flaw was found in fast-uri, a dependency-free URI parser. This vulnerability occurs because the software folds the host to lowercase before percent-decoding it, allowing percent-encoded uppercase characters to bypass this normalization. A remote attacker could exploit this by crafting a malicio...

CVE-2026-96812

A vulnerability in Google gVisor on Linux platforms (prior to commit 573a9e73cf844f) allows a local attacker with container image deployment privileges to achieve root code execution on the host system. The issue stems from an improper exposure of resource in the host file helper (gofer ) when CU...

EUVD-2026-87111

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

CVE-2026-96812 Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a...

AZL-105278 CVE-2026-93834 affecting package qemu 10.1.0-1

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

CVE-2026-93834

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...