CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100540

Versions of OpenClaw Feishu prior to 2026.8.1 are vulnerable to an authentication bypass because the system fails to verify if a configured default account is disabled before using it for model tool operations. In multi-account configurations, an attacker can exploit a disabled default account th...

EUVD-2026-87510

OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can exploit multi-account setups where a disabled default account retains credentials to read or modify Feishu resources through a revoked...

PT-2026-99206

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.28 through 2026.8.0 Description An issue exists where an untrusted workspace .env file can set the CLOUDSDK PYTHON ARGS environment variable. If an operator starts the software within attacker-controlled workspace...

CVE-2026-100570: Improper Neutralization of Argument Delimiters in a Command

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

PT-2026-98519

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mediatek vcodec component where the vdec av1 slice setup tile function copies tile cols + 1 and tile rows + 1 entries from the bitstream tile info into the mi col...

DEBIAN-CVE-2026-93260

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xiveinitipis fails e.g. irqdomainallocirqs fails, the error path frees the global xiveipis array. However, xivesmpprobe previously ignored this failure and...

EUVD-2026-86132

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xiveinitipis fails e.g. irqdomainallocirqs fails, the error path frees the global xiveipis array. However, xivesmpprobe previously ignored this failure and...

Cross-site Scripting (XSS)

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

SUSE CVE-2026-81627

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...

SUSE CVE-2026-90184

In the Linux kernel, the following vulnerability has been resolved: nullblk: serialize configfs attribute updates with device setup The attribute store methods generated with NULLBDEVICEATTR refuse to change the configuration of a live device by testing NULLBDEVFLCONFIGURED, but that flag is only...

The vulnerabilities in the scripts of lib/setup-sandbox.js and lib/bridge.js, located in the vm2 package manager’s library, allow attackers to compromise the integrity of protected information.

The vulnerability in the scripts of lib/setup-sandbox.js and lib/bridge.js in the vm2 package manager NPM is related to the lack of validation for the correctness of incoming requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information...

The vulnerability in the `defaultSandboxPrepareStackTrace` function of the `lib/setup-sandbox.js` file in the `vm2` library of the NPM package manager allows a attacker to compromise the integrity of protected information.

The vulnerability of the defaultSandboxPrepareStackTrace function in the lib/setup-sandbox.js file of the vm2 library, a part of the npm package manager, is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...

SUSE CVE-2026-90352

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure The hif2 reference obtained by mt7915pciinithif2 is only released on error paths that key off dev-hif2, which is not assigned until after the IRQ setup. If...

CVE-2026-94218

A flaw was found in the authentication session management of Keycloak, an identity and access management solution. The issue occurs when an administrator enforces a stronger authentication flow, such as mandatory two-factor authentication 2FA setup, through a client policy. A user can bypass this...

PT-2026-96049

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the authentication session management allows users to bypass mandatory security requirements, such as two-factor authentication 2FA setup, enforced via client policies. By manually...

OESA-2026-3945 docker security update

Security Fixes: Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or...

CVE-2026-63635

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted psd with an invalid colormode bypasses normal validation when oiio:rawcolor or psd:rawdata is enabled...

CVE-2026-63635 OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted psd with an invalid colormode bypasses normal validation when oiio:rawcolor or psd:rawdata is enabled...