CVE-2026-26320 OpenClaw macOS deep link confirmation truncation can conceal executed agent message

OpenClaw is a personal AI assistant. OpenClaw macOS desktop client registers the openclaw:// URL scheme. For openclaw://agent deep links without an unattended key, the app shows a confirmation dialog that previously displayed only the first 240 characters of the message, but executed the full...

PT-2026-20950

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.6 through 2026.2.13 Description The OpenClaw macOS desktop client registers the openclaw:// URL scheme. For openclaw://agent deep links lacking an unattended key, the application displays a confirmation dialog...

PT-2026-28792

Name of the Vulnerable Software and Affected Versions OWASP Core Rule Set CRS versions prior to 3.3.9 and prior to 4.25.0 Description The OWASP Core Rule Set CRS contains a flaw where whitespace padding in filenames can bypass file upload extension checks. This allows the upload of dangerous file...

Exploit for User Interface (UI) Misrepresentation of Critical Information in Microsoft

CVE-2025-9491 LNK Obfuscation PoC A proof-of-concept tool for...