CVE-2026-100569

OpenClaw is an npm-distributed application. In versions = 2026.4.25 and 2026.8.1, the workspace environment-variable filter did not block variables ending in ENDPOINT, so an untrusted workspace .env file could set AZURESPEECHENDPOINT. Azure Speech preferred that value over the configured region, ...

CVE-2026-100570

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

sentinel

Sentinel · Security Operations & Management Console Lightwe...

CVE-2026-100570

The OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

EUVD-2026-87481

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100569

The OpenClaw npm-distributed application, versions >= 2026.4.25 and

CVE-2026-100569 OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override

OpenClaw is an npm-distributed application. In versions = 2026.4.25 and 2026.8.1, the workspace environment-variable filter did not block variables ending in ENDPOINT, so an untrusted workspace .env file could set AZURESPEECHENDPOINT. Azure Speech preferred that value over the configured region, ...

CVE-2026-100569 OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override

OpenClaw is an npm-distributed application. In versions = 2026.4.25 and 2026.8.1, the workspace environment-variable filter did not block variables ending in ENDPOINT, so an untrusted workspace .env file could set AZURESPEECHENDPOINT. Azure Speech preferred that value over the configured region, ...

EUVD-2026-87482

OpenClaw is an npm-distributed application. In versions = 2026.4.25 and 2026.8.1, the workspace environment-variable filter did not block variables ending in ENDPOINT, so an untrusted workspace .env file could set AZURESPEECHENDPOINT. Azure Speech preferred that value over the configured region, ...

CVE-2026-100569 OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override

OpenClaw is an npm-distributed application. In versions = 2026.4.25 and 2026.8.1, the workspace environment-variable filter did not block variables ending in ENDPOINT, so an untrusted workspace .env file could set AZURESPEECHENDPOINT. Azure Speech preferred that value over the configured region, ...

PT-2026-99384

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.12 Description A time-of-check time-of-use TOCTOU race condition exists in the SSH key synchronization cron within the SshKeys::generateFiles function located in lib/Froxlor/Cron/System/SshKeys.php. TOCTOU is a...

PT-2026-99225

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description A sandbox bypass exists in the browser tool that allows sandboxed sessions to access paired node browser actions, even when the allowHostControl variable is set to false. An attacker who controls...

PT-2026-99206

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.28 through 2026.8.0 Description An issue exists where an untrusted workspace .env file can set the CLOUDSDK PYTHON ARGS environment variable. If an operator starts the software within attacker-controlled workspace...

PT-2026-99202

Name of the Vulnerable Software and Affected Versions OpenClaw LINE versions prior to 2026.8.1 Description An access control issue exists where the group allowlist mode silently inherits values from the DM allowFrom variable when groupAllowFrom is not explicitly configured. This allows attackers...

PT-2026-99174

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description The software fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments using Active Memory with requester-specific tool rules,...

PT-2026-99236

Name of the Vulnerable Software and Affected Versions Automatic.css version 4.0.0 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS via the REQUEST URI variable. This allows the injection of arbitrary web...

PT-2026-99378

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.19.1 Description An issue exists in the apiCall context entry of namespaced Policy resources caused by inconsistent path interpretation between validation and execution. A low-privilege tenant can utilize...