PT-2026-99193

Name of the Vulnerable Software and Affected Versions openclaw versions 2026.5.2 through 2026.8.0 Description An incorrect authorization issue exists in WhatsApp group handling. A group sender who is permitted to send ordinary messages but is restricted by commands.allowFrom or owner command...

PT-2026-99184

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.7.1 through 2026.7.2 Description OpenClaw, distributed as the npm package openclaw, contains an issue where alternate but valid file: URL spellings supplied over the Agent Client Protocol ACP are treated as relative path...

PT-2026-99224

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description The software fails to enforce the administrator scope requirement for browser control when accessed via the node.invoke method, despite direct browser.request access requiring such scope. In...

CVE-2026-100588: Incorrect Authorization

OpenClaw npm package 'openclaw' before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.invoke method, although direct browser.request access requires administrator scope. In Gateway deployments that honor caller identity and...

CVE-2026-100670: Authorization Bypass Through User-Controlled Key

Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and account blueprints. The access map is gated by a security@: admin.super guard that is resolved by the field's exact path, so a submitted flat dot-notation key such as access.admin.super instead of the...

PT-2026-99214

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description In Gateway deployments using authentication modes that honor caller identity and narrower operator scopes, the software fails to restrict owner-only infrastructure tools exposed through the...

CVE-2026-100563: Improper Neutralization of Formula Elements in a CSV File

OpenClaw npm package openclaw before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or...

PT-2026-99204

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description Insufficient access restrictions to operator command cron jobs allow model-visible agent callers to read and execute ownerless command jobs. This allows attackers to inspect stored environment...

PT-2026-99206

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.28 through 2026.8.0 Description An issue exists where an untrusted workspace .env file can set the CLOUDSDK PYTHON ARGS environment variable. If an operator starts the software within attacker-controlled workspace...

CVE-2026-100543: Exposure of Sensitive Information to an Unauthorized Actor

OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...

PT-2026-99180

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1 Description Redacted configuration responses may include deterministic hashes computed from the original, unredacted configuration. If the Gateway password has low entropy and other configuration values can ...

PT-2026-99215

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description The software incorrectly trusts requester provenance in message.action. In identity-bearing Gateway deployments, which are authentication modes that honor caller identity and narrower operator...

PT-2026-99205

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.25 through 2026.8.0 Description The workspace environment-variable filter fails to block variables ending in ENDPOINT. This allows an untrusted workspace .env file to set the AZURE SPEECH ENDPOINT variable. Because Azu...

CVE-2026-100569: Insufficiently Protected Credentials

OpenClaw is an npm-distributed application. In versions = 2026.4.25 and 2026.8.1, the workspace environment-variable filter did not block variables ending in ENDPOINT, so an untrusted workspace .env file could set AZURESPEECHENDPOINT. Azure Speech preferred that value over the configured region, ...

CVE-2026-100568: Exposure of Sensitive Information to an Unauthorized Actor

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...

CVE-2026-100573: Missing Authorization

OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to invoke tools explicitly denied by sandbox.tools.deny policy. Attackers can list and invoke denied tools to access data or perform actions th...

PT-2026-99302

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.90 Parse Server versions 9.0.0 through 9.10.1-alpha.8 Description The device token deduplication logic for installation records fails to validate the type of client-supplied installation fields before using...

PT-2026-99176

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description The software fails to revoke memory tool access when an operator hot-disables memory configuration. This occurs because the execution-time resolver treats explicit disablement as an unavailable...

CVE-2026-100597: Time-of-check Time-of-use (TOCTOU) Race Condition

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

openSUSE 16: sdbootutil / sdbootutil-bash-completion / etc (openSUSE-SU-2026:21933-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21933-1 advisory. Security issues fixed: - CVE-2026-41676: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270192. -...