CVE-2026-43532

creationtimestamp| type| source ---|---|--- 2026-05-05 13:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4cpifruj2k 2026-05-05 17:46:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4qjnig672w...

CVE-2026-43532

OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media...

@chrysb/alphaclaw (>=0.8.8, <=0.9.0) potentially affected by CVE-2026-43532 via openclaw (2026.4.9)

openclaw NPM version 2026.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw =0.8.8, =0.9.0 Source cves: CVE-2026-43532 Source advisory: SNYK:JS-OPENCLAW-16109686...