Incorrect Behavior Order: Validate Before Canonicalize

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize via incorrect classification of alternate file: URL spellings in the Agent Client Protocol ACP handler. Alternate but valid file: UR...

CVE-2026-100547

The OpenClaw coding agent (npm package openclaw) versions 2026.7.1 through 2026.7.2 are vulnerable to a local file disclosure flaw. The root cause is that alternate but valid file: URL spellings supplied over the Agent Client Protocol (ACP) are incorrectly treated as relative paths and classified...

EUVD-2026-87503

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547

OpenClaw is a coding agent distributed as the npm package "openclaw". In affected versions 2026.7.1 through 2026.7.2, alternate but valid "file:" URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547 OpenClaw before 2026.8.1 Authentication Bypass via File URL

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547 OpenClaw before 2026.8.1 Authentication Bypass via File URL

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

CVE-2026-100547: Incorrect Behavior Order: Validate Before Canonicalize

OpenClaw is a coding agent distributed as the npm package openclaw. In affected versions 2026.7.1 through 2026.7.2, alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP were treated as relative paths and were incorrectly classified as reads scoped to the session...

PT-2026-99184

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.7.1 through 2026.7.2 Description OpenClaw, distributed as the npm package openclaw, contains an issue where alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP are treated as relative path...

cryptocom-agent-client (>=1.0.0, <=1.0.7), langevaluate (0.1.0) +2 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.1)

langchain-anthropic PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - cryptocom-agent-client =1.0.0, =0.1.3, =0.1.0, =0.4.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2556...

cryptocom-agent-client (>=1.0.5, <=1.0.7), knowai (0.2.3) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.55)

langchain-core PYPI version 0.3.55 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - cryptocom-agent-client =1.0.5, =1.0.7 - knowai 0.2.3 - ragbuilder 0.1.6 Source cves: CVE-2026-26013 Source advisory:...

chainlite (0.3.7), cryptocom-agent-client (>=1.0.0, <=1.0.4) +2 more potentially affected by CVE-2026-26013 via langchain-core (0.3.33)

langchain-core PYPI version 0.3.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chainlite 0.3.7 - cryptocom-agent-client =1.0.0, =0.0.1, =0.3.0, =0.4.0 Source cves: CVE-2026-26013 Source advisory:...

chainlite (0.3.7), cryptocom-agent-client (>=1.0.0, <=1.0.4) +5 more potentially affected by CVE-2026-55443 via langchain (0.3.17)

langchain PYPI version 0.3.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - chainlite 0.3.7 - cryptocom-agent-client =1.0.0, =0.0.3, =0.3.0, =0.4.0 - stitch-fuzz 0.1.2 Source cves: CVE-2026-55443 Source advisory:...

chainlite (0.3.7), cryptocom-agent-client (>=1.0.0, <=1.0.4) +5 more potentially affected by CVE-2026-55443 via langchain (0.3.17)

langchain PYPI version 0.3.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - chainlite 0.3.7 - cryptocom-agent-client =1.0.0, =0.0.3, =0.3.0, =0.4.0 - stitch-fuzz 0.1.2 Source cves: CVE-2026-55443 Source advisory:...

cryptocom-agent-client (>=1.0.0, <=1.0.7), langevaluate (0.1.0) +2 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.1)

langchain-anthropic PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - cryptocom-agent-client =1.0.0, =0.1.3, =0.1.0, =0.4.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

CVE-2026-41704

AgentClienthandlemethod lines 264-303 processes every NATS reply. It calls injectcompilelog line 273 on every response, which reads response'value''result''compilelogid' line 332-338 and passes it to downloadanddeleteblob. Separately, any response containing 'exception' goes through formatexcepti...

CVE-2026-41704

AgentClienthandlemethod lines 264-303 processes every NATS reply. It calls injectcompilelog line 273 on every response, which reads response'value''result''compilelogid' line 332-338 and passes it to downloadanddeleteblob. Separately, any response containing 'exception' goes through formatexcepti...

EUVD-2026-32108

AgentClienthandlemethod lines 264-303 processes every NATS reply. It calls injectcompilelog line 273 on every response, which reads response'value''result''compilelogid' line 332-338 and passes it to downloadanddeleteblob. Separately, any response containing 'exception' goes through formatexcepti...

aa-rag (>=0.1.0, <=0.4.1), aiagents4pharma (>=1.8.2, <=1.22.3) +10 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.5)

langchain-text-splitters PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - aa-rag =0.1.0, =1.8.2, =1.0.0, =0.0.3, =0.0.2, =25.7.1.0, =0.3.0, =0.7.0, =0.1.1, =0.6.51, =0.0.30, =0.0.33 Sour...

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSHAGENTSUCCESS 0x06 message to requests expecting typed replies e.g., List, Sign. The unmarshal layer produces an unexpected message type, which the client code does not handle,...

chainlite (0.3.7), cryptocom-agent-client (>=1.0.0, <=1.0.4) +2 more potentially affected by CVE-2026-34070 via langchain-core (0.3.33)

langchain-core PYPI version 0.3.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chainlite 0.3.7 - cryptocom-agent-client =1.0.0, =0.0.1, =0.3.0, =0.4.0 Source cves: CVE-2026-34070 Source advisory:...