CVE-2026-33578 OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots...

CVE-2026-33578

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlists downgrade to an open policy, allowing bypass of sender restrictions and interaction with bots. Affected components include extensions/googlechat/sr...

CVE-2026-33578 OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots...

CVE-2026-33578

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots...

CVE-2026-33578 OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots...

CVE-2026-34172

Giskard is an open-source Python library for testing and evaluating agentic systems. Prior to versions 0.3.4 and 1.0.2b1, ChatWorkflow.chatmessage passes its string argument directly as a Jinja2 template source to a non-sandboxed Environment. A developer who passes user input to this method enabl...

CVE-2026-4400

Insecure Direct Object Reference IDOR vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public/conversations/' and, if exploited, coul...

CVE-2026-4399

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques formulating a question in such a way that, upon receiving an affirmative response 'true', the model executes the injected instruction,...

CVE-2026-4400

Insecure Direct Object Reference IDOR vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public/conversations/' and, if exploited, coul...

akita-ai (0.1.0), chat-with-mlx (>=0.1.0, <=0.1.5) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.1.26)

langchain-core PYPI version 0.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - akita-ai 0.1.0 - chat-with-mlx =0.1.0, =0.0.1, =0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

atom-llm (0.1.0), cori-ai (>=0.0.0, <=1.2.12) +5 more potentially affected by CVE-2026-34070 via langchain-core (0.3.28)

langchain-core PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - atom-llm 0.1.0 - cori-ai =0.0.0, =0.7.22, =0.1.3, =0.1.2, =0.1.5 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

chat-with-mlx (>=0.2.0, <=0.2.2), ragstack-ai-langchain (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-34070 via langchain-core (0.1.45)

langchain-core PYPI version 0.1.45 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chat-with-mlx =0.2.0, =1.0.0, =1.0.1 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

aa-rag (>=0.1.0, <=0.4.1), graphtomation (>=0.0.3, <=0.0.5) +4 more potentially affected by CVE-2026-34070 via langchain-core (0.3.29)

langchain-core PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.1.0, =0.0.3, =0.3.0, =0.1.1, =0.0.30, =0.0.33 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

PT-2026-29220

Insecure Direct Object Reference IDOR vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public/conversations/' and, if exploited, coul...

WordPress Plugin Addon Jobsearch Chat Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in Addon Jobsearch Chat, a WordPress plugin, for...

PT-2026-29309

Name of the Vulnerable Software and Affected Versions Discourse versions 2026.1.0 through 2026.1.2, 2026.2.0 through 2026.2.1, and 2026.3.0. Description A flaw exists in Discourse that may allow unauthorized channel membership inference from chat user search. This issue does not require...

CVE-2026-4400: Authorization Bypass Through User-Controlled Key

Insecure Direct Object Reference IDOR vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public/conversations/' and, if exploited, coul...

1millionbot Millie chatbot 安全漏洞

1millionbot Millie chatbot is a chatbot system provided by the Spanish company 1millionbot, capable of offering intelligent dialogue and automated customer service capabilities. There is a security vulnerability in 1millionbot Millie chatbot, which stems from the possibility for users to use...

Discourse 信息泄露漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an information disclosure vulnerability that stems from the possibility of inferring the identity of a channel...

CVE-2026-33578: Incorrect Authorization

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots...