CVE-2026-100564

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100564

Versions of OpenClaw before 2026.8.1 are vulnerable to CSV Formula Injection . The root cause is a failure to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with the permissions of the spre...

PT-2026-99201

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description The software fails to neutralize spreadsheet formula characters in participant display names during attendance CSV exports. This allows attackers to inject formula-like cells that execute with th...