15834 matches found
GHSA-8WG3-5MCM-FJQ8 OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows
Summary Workspace .env could override Homebrew executable selection for skill install flows. In affected versions, a workspace .env in a repository opened by a trusted operator could override the Homebrew executable used by the install helper. This advisory is scoped to the named feature and...
GHSA-GRC3-2J34-P6GM OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs
Summary message.action forwarding could send Gateway credentials to model-supplied loopback URLs. In affected versions, model-controlled action metadata that selects a loopback Gateway URL could forward the action payload with Gateway credentials to the supplied loopback URL. This advisory is...
NPM: OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs
NPM: OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs vulnerability discovered by ? in WordPress Npm openclaw versions = 2026.4.29...
OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs
Summary message.action forwarding could send Gateway credentials to model-supplied loopback URLs. In affected versions, model-controlled action metadata that selects a loopback Gateway URL could forward the action payload with Gateway credentials to the supplied loopback URL. This advisory is...
MINI-JHCW-M4X3-834P
Bulletin has no description...
GHSA-83W9-H5WV-J9XM OpenClaw: Node pairing reconnection could confuse approval scope state
Summary Node pairing reconnection could confuse approval scope state. In affected versions, a paired or reconnecting node session could mutate pairing state in a way that changed the approval scope decision. This advisory is scoped to the named feature and configuration. It does not change...
OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions
Summary Slack plugin approvals used the exec approver gate for plugin actions. In affected versions, a Slack user authorized only for exec approvals could resolve a plugin approval through the exec approver gate. This advisory is scoped to the named feature and configuration. It does not change...
MINI-M668-G893-3H3M
Bulletin has no description...
MINI-GP22-M4MG-HH7J
Bulletin has no description...
MINI-RVFH-MVGG-M3MG
Bulletin has no description...
Out of bounds read in Tensorflow
ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...
MINI-WHXR-96GW-C34W
Bulletin has no description...
MINI-22VM-XRP4-58QR
Bulletin has no description...
MINI-8226-H48W-PFXJ
Bulletin has no description...
MINI-X733-R455-2PF9
Bulletin has no description...
MINI-HH7R-RM27-V855
Bulletin has no description...
Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation
A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Hiyouga Llama-Factory
CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecod...
