CVE-2025-71426

In Contrast (a confidential-computing runtime for Kubernetes) versions before 1.4.1 , a flaw in the Coordinator recovery process allows for impersonation via an unauthenticated recovery. Because a recovering Coordinator fails to verify the seed supplied by the recovering party, an attacker can de...

EUVD-2025-211006

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest passes validation but whose secret seed is...

CVE-2025-71426 Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest passes validation but whose secret seed is...

EUVD-2025-211007

Contrast Edgeless Systems before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRASTLOGLEVEL set to info or debug. Because info is the default, all installations that do not customize the initializer log level are...

CVE-2025-71426 Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest passes validation but whose secret seed is...

EUVD-2025-211009

Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a result, workload secrets are exposed to any Kubernetes user wi...

CVE-2026-101050: Improper Authentication

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

PT-2026-99479

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.106 Description An issue exists in the 'POST /api/credentials/test' endpoint that allows collaborators with shared credential access to exfiltrate the secret of the credential owner. An attacker can override the...

SUSE CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-100568 OpenClaw before 2026.8.1 Unauthorized Command Job Access

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...

CVE-2026-100568

OpenClaw versions prior to 2026.8.1 are vulnerable to unauthorized access to operator command cron jobs. The root cause is a failure to properly restrict access, which allows model-visible agent callers to read and execute ownerless command jobs. This flaw enables attackers to inspect stored envi...

CVE-2026-100543

The OpenClaw npm package (version openclaw before 2026.8.1 ) is vulnerable to information disclosure because it includes deterministic hashes computed over original, unredacted configurations within redacted configuration responses. If the Gateway password has low entropy and other configuration ...

CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100534

Versions of OpenClaw prior to 2026.8.1 are affected by an authorization bypass vulnerability within the webhook TaskFlow cancellation mechanism. An attacker possessing a webhook route secret can provide an arbitrary child session key to cancel ACP or subagent work that falls outside the route's c...

EUVD-2026-87516

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

EUVD-2026-87368

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...

CVE-2026-100543: Exposure of Sensitive Information to an Unauthorized Actor

OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...

CVE-2026-100534: Authorization Bypass Through User-Controlled Key

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100502

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...

CVE-2026-100502 Flame through 2.4.0 Admin Token Insufficient Session Expiration

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...