CVE-2026-32037: Server-Side Request Forgery (SSRF)

OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls...

Uncovering Security Threats and Architecting Defenses in Autonomous Agents: A Case Study of OpenClaw

The rapid evolution of Large Language Models LLMs into autonomous, tool-calling agents has fundamentally altered the cybersecurity landscape. Frameworks like OpenClaw grant AI systems operating-system-level permissions and the autonomy to execute complex workflows. This level of access creates...

ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents

Tool-augmented LLM agents increasingly rely on multi-step, multi-tool workflows to complete real tasks. This design expands the attack surface, because data produced by one tool can be persisted and later reused as input to another tool, enabling exploitable source-to-sink dataflows that only...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, crossplane-function-environment-configs, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, cloudprober, terraform-provider-azapi, crossplane-provider-aws-s3-fips, packer, cluster-api-aws-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: mongo-tools, terraform-provider-grafana-fips, crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, nri-discovery-kubernetes, pvc-autoresizer, cloudprober, amazon-k8s-cni,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: mongo-tools, terraform-provider-grafana-fips, crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, nri-discovery-kubernetes, pvc-autoresizer, cloudprober, amazon-k8s-cni,...

CVE-2026-30916

...

EUVD-2026-10425

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.9, an attacker may be able to bypass escaping for the shell being used. This can result, for example, in exposure of sensitive information. This impacts users of Shescape that configure their shell to point to a file on disk...

CVE-2026-30916

CVE-2026-30916 relates to the Shescape JavaScript library. Prior to version 2.1.9, an attacker could bypass shell escaping when the configured shell pointed to a file that is a chain of symlinks, potentially exposing sensitive information depending on the shell used. A fix is available in 2.1.9. ...

CVE-2026-30247

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, the application's "Import document via URL" feature is vulnerable to Server-Side Request Forgery SSRF through HTTP redirects. While the backend implements comprehensive UR...

CVE-2026-30247

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, the application's "Import document via URL" feature is vulnerable to Server-Side Request Forgery SSRF through HTTP redirects. While the backend implements comprehensive UR...

GHSA-6F6W-6J58-RQ76 Withdrawn Advisory: Shescape has possible misidentification of shell due to link chains

Withdrawn Advisory This advisory has been withdrawn because it falls outside the https://github.com/ericcornelissen/shescape/blob/a2544a1c78cae19d0e81a485b997bf0b0fcc2c12/SECURITY.mdthreat-model. This link is maintained to preserve external references. Original Description Impact This impacts use...

Withdrawn Advisory: Shescape has possible misidentification of shell due to link chains

Withdrawn Advisory This advisory has been withdrawn because it falls outside the https://github.com/ericcornelissen/shescape/blob/a2544a1c78cae19d0e81a485b997bf0b0fcc2c12/SECURITY.mdthreat-model. This link is maintained to preserve external references. Original Description Impact This impacts use...

EUVD-2026-10086

Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: osv-scanner, knative-serving, ko, teleport, harbor, vexctl, kyverno-notation-aws, scorecard, slsa-verifier, bento, harbor-scanner-trivy, gitsign, lazydocker, zot, kbld, spire-server, nerdctl, k9s, flux-notification-controller, aactl, istio, trivy-operator,...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: osv-scanner, knative-serving, ko, teleport, harbor, vexctl, kyverno-notation-aws, scorecard, slsa-verifier, bento, harbor-scanner-trivy, gitsign, lazydocker, zot, kbld, spire-server, nerdctl, k9s, flux-notification-controller, aactl, istio, trivy-operator,...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: dive, flux-notification-controller, flux-notification-controller-fips, nerdctl, kubescape-operator, cosign-fips, nerdctl-fips, flux-helm-controller-fips, gitsign, flux-image-reflector-controller, crossplane, kargo, istio-fips, ratify-fips, flux-helm-controller,...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: dive, flux-notification-controller, flux-notification-controller-fips, nerdctl, kubescape-operator, cosign-fips, nerdctl-fips, flux-helm-controller-fips, gitsign, flux-image-reflector-controller, crossplane, kargo, istio-fips, ratify-fips, flux-helm-controller,...

Google Go 安全漏洞

Google Go is a static, strongly typed, compiled, concurrent programming language with garbage collection features from the American company Google. There is a security vulnerability in Google Go, which stems from improper application of constraints when verifying certificate chains that contain...

CVE-2026-27138: Undefined Security Weakness

Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS...