Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/26 2:16 p.m.•18 views

CVE-2026-100603

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

8.7CVSS0.00294EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/26 1:22 p.m.•27 views

CVE-2026-100603

The ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow. Four distinct ordinary authenticated accounts can coordinate to report a visible skill, triggering its automatic hiding (moderationStatus: hidden) from the catalog without a moderator's decisio...

8.7CVSS5.8AI score0.00294EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/26 1:22 p.m.•17 views

CVE-2026-100603 ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

8.7CVSS5.8AI score0.00294EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/09/26 1:22 p.m.•13 views

CVE-2026-100603 ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

8.7CVSS5.8AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/09/26 1:22 p.m.•19 views

EUVD-2026-87698

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

8.7CVSS5.8AI score0.00294EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/26 12:00 a.m.•12 views

CVE-2026-100603: Improper Control of Interaction Frequency

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

8.7CVSS5.8AI score0.00294EPSS
SaveExploits0References2
Rows per page
Query Builder