CVE-2026-53719 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53718 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53716 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53714 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-WCRF-9VRR-854F vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53715 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-15379 Arbitrary File Read as SYSTEM in Symantec ITMS

The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...

CVE-2026-15379 Arbitrary File Read as SYSTEM in Symantec ITMS

The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...

EUVD-2026-45151

The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...

CVE-2026-62219

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass agent ID restrictions by submitting blank agent IDs, allowing actions that should require stronger authorization or...

CVE-2026-62209

OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which could ignore the toolsAllow policy check. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could perform actions...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the agent-mode dispatch. An attacker can gain unauthorized access to restricted actions by exploiting the lack of proper policy checks when this feature is...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the allowedAgentIds validation. An attacker can gain unauthorized access to restricted actions by submitting blank agent IDs, thereby bypassing intended...

CVE-2026-62219

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass agent ID restrictions by submitting blank agent IDs, allowing actions that should require stronger authorization or...

CVE-2026-62219 OpenClaw 2026.2.12 < 2026.5.26 Authorization Bypass via Blank Agent IDs

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass agent ID restrictions by submitting blank agent IDs, allowing actions that should require stronger authorization or...