User Impersonation

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to User Impersonation via the allowFrom process. An attacker can access agent responses intended for another identity by leveraging mutable display metadata to match policy entries...

User Impersonation

Overview @openclaw/zalo is an OpenClaw Zalo channel plugin Affected versions of this package are vulnerable to User Impersonation via the allowFrom process. An attacker can access agent responses intended for another identity by leveraging mutable display metadata to match policy entries...

CVE-2026-53857: Authentication Bypass by Spoofing

OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata could match allowFrom policy entries through display name changes. Attackers with mutable display names could receive agent responses intended for different Zalo identities when...

CVE-2023-21663

Memory Corruption while accessing metadata in Display...

CVE-2023-21663: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory Corruption while accessing metadata in Display...

PT-2023-18326 · Qualcomm · Snapdragon +37

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while accessing metadata in the display. No information is provided about the estimated number of...

WordPress Plugin display-metadata 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...