12 matches found
The vulnerability of the Tlon plugin (Urbit), which targets the AI agent OpenClaw (previously ClawdBot or MoltBot), allows a hacker to perform an SSRF attack.
The vulnerability of the Tlon plugin Urbit, which is part of the AI agent OpenClaw previously known as ClawdBot or MoltBot, stems from insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
The vulnerability in the `src/auto-reply/reply/commands-approve.ts` script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to bypass existing security mechanisms.
The vulnerability in the src/auto-reply/reply/commands-approve.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms...
Malicious code in @signetai/signet-memory-openclaw (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16e55a5379336a0ab822ee9fe70b20023e452595f41cfe2624464aadb73d390 On plugin load, register invokes installFetchSanitizer dist/index.js:14420-14463 which monkey-patches globalThis.fetch. For requests to...
Malicious code in openclaw-agent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b89b6a94f589218276e6dabe5accf4a6d6a9b22cd7412cce0a58069bccd76bbb The package is intended to create a backdoor and steal sensitive data, but the analyzed code did not finally exfiltrate the content of sensitive files. ---...
MAL-2026-4183 Malicious code in openclaw-agent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b89b6a94f589218276e6dabe5accf4a6d6a9b22cd7412cce0a58069bccd76bbb The package is intended to create a backdoor and steal sensitive data, but the analyzed code did not finally exfiltrate the content of sensitive files. ---...
EUVD-2026-11205
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
A remote code execution RCE vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack...
CVE-2026-30741
OpenClaw Agent Platform up to v2026.2.6 is affected by a remote code execution (RCE) via a Request-Side prompt injection attack. The root cause is a lack of integrity validation for upstream API requests, which can cause high‑severity command execution in downstream components (e.g., MCP tools) w...
