GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: kuberay-operator-fips, gitlab-cng, vault-fips, etcd, crossplane-provider-aws-elb, crossplane-provider-aws-kafka, kubernetes-csi-driver-nfs, crossplane-provider-aws-elasticsearch-fips, teleport, yunikorn-k8shim, gitlab-workhorse-ce, crossplane-provider-family-aws-fips...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: kuberay-operator-fips, gitlab-cng, vault-fips, etcd, crossplane-provider-aws-elb, crossplane-provider-aws-kafka, kubernetes-csi-driver-nfs, crossplane-provider-aws-elasticsearch-fips, teleport, yunikorn-k8shim, gitlab-workhorse-ce, crossplane-provider-family-aws-fips...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, step, grafana-agent-operator, cilium-cli, chartmuseum, cri-tools, kubernetes-event-exporter, crossplane-provider-azure-storage, trivy, spark-operator, crossplane-provider-aws-sqs, ipfs-cluster, vertical-pod-autoscaler, datadog-agent, hubble,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, step, grafana-agent-operator, cilium-cli, chartmuseum, cri-tools, kubernetes-event-exporter, crossplane-provider-azure-storage, trivy, spark-operator, crossplane-provider-aws-sqs, ipfs-cluster, vertical-pod-autoscaler, datadog-agent, hubble,...

CLEANSTART-2026-YX54699 race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics

Multiple security vulnerabilities affect the strimzi-kafka-operator package. A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. See references for individual vulnerability details...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: openbao, rancher-webhook, rancher-agent, cert-manager, seaweedfs, juicefs, percona-server-mongodb-operator, spqr, gitlab-runner, kyverno-notation-aws, minio, rclone, k6, nuclei, ratify, zot, bento, gitea, cert-manager-csi-driver, frp, kyverno, grafana, terraform,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: openbao, rancher-webhook, rancher-agent, cert-manager, seaweedfs, juicefs, percona-server-mongodb-operator, spqr, gitlab-runner, kyverno-notation-aws, minio, rclone, k6, nuclei, ratify, zot, bento, gitea, cert-manager-csi-driver, frp, kyverno, grafana, terraform,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, cert-manager-fips, vault-fips, beats-fips, rclone, gitea-fips, yunikorn-k8shim-fips, external-secrets-operator, versitygw, teleport, yunikorn-k8shim, minio, neuvector-fips, rancher-agent, cert-manager-csi-driver, telegraf, ratify, kyverno-fips,...

k8sGPT has Prompt Injection through its k8sGPT-Operator

Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...

GHSA-394X-274P-MQC6 Duplicate Advisory: OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-767m-xrhc-fxm7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write...

EUVD-2026-25331

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by sending malicious requests from a browser in trusted-proxy deployments to perform unauthorized...

GHSA-2XP4-QHR4-XQM2 Duplicate Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mhr7-2xmv-4c4q. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy...

Duplicate Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mhr7-2xmv-4c4q. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy...

CVE-2026-41347

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by sending malicious requests from a browser in trusted-proxy deployments to perform unauthorized...

CVE-2026-41359

OpenClaw prior to version 2026.3.28 contains a privilege escalation vulnerability. Authenticated operators with write permissions can access admin-class Telegram configuration and cron persistence settings via the send endpoint due to insufficient access controls. The CVE entry notes a CVSS v3.1/...

CVE-2026-41359 OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41359 OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41359 OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41347 OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by sending malicious requests from a browser in trusted-proxy deployments to perform unauthorized...

CVE-2026-41347 OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by sending malicious requests from a browser in trusted-proxy deployments to perform unauthorized...