Lucene search
+L

10 matches found

osv-ghsa
osv-ghsa
•added 2026/07/02 4:23 p.m.•30 views

GHSA-83W9-H5WV-J9XM OpenClaw: Node pairing reconnection could confuse approval scope state

Summary Node pairing reconnection could confuse approval scope state. In affected versions, a paired or reconnecting node session could mutate pairing state in a way that changed the approval scope decision. This advisory is scoped to the named feature and configuration. It does not change...

9.8CVSS5.9AI score0.00369EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/07/02 4:23 p.m.•36 views

OpenClaw: Node pairing reconnection could confuse approval scope state

Summary Node pairing reconnection could confuse approval scope state. In affected versions, a paired or reconnecting node session could mutate pairing state in a way that changed the approval scope decision. This advisory is scoped to the named feature and configuration. It does not change...

9.8CVSS5.9AI score0.00369EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
•added 2026/07/02 4:23 p.m.•20 views

NPM: OpenClaw: Node pairing reconnection could confuse approval scope state

NPM: OpenClaw: Node pairing reconnection could confuse approval scope state vulnerability discovered by ? in WordPress Npm openclaw versions 2026.5.27...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/06/13 12:34 a.m.•19 views

Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-83w9-h5wv-j9xm. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nod...

9.8CVSS5.7AI score0.00369EPSS
SaveExploits0References4Affected Software1
osv-ghsa
osv-ghsa
•added 2026/06/13 12:34 a.m.•8 views

GHSA-C85P-9PVR-F7F5 Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-83w9-h5wv-j9xm. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nod...

9.8CVSS5.5AI score
SaveExploits0References4
NVD
NVD
•added 2026/06/12 10:16 p.m.•34 views

CVE-2026-53838

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval...

9.8CVSS0.00369EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2026/06/12 9:57 p.m.•22 views

CVE-2026-53838 OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval...

6CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/12 12:00 a.m.•35 views

PT-2026-49042

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.27 Description A state mutation issue exists in the node pairing reconnection process. This allows paired nodes to confuse approval scope decisions, enabling attackers to exploit reconnection logic to restore ...

9.8CVSS5.7AI score0.00369EPSS
SaveExploits0References13
CNVD
CNVD
•added 2026/04/10 12:00 a.m.•28 views

OpenClaw has an unspecified vulnerability (CNVD-2026-20007)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to cause a low-privileged operator to approve nodes with a wider scope...

8.6CVSS5.7AI score0.00417EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•22 views

OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to cause a low-privileged operator to approve nodes with a wider scope...

8.6CVSS5.7AI score0.00417EPSS
SaveExploits0References3
Rows per page
Query Builder