CVE-2026-35668

OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read arbitrary files from other agents' workspaces via unnormalized mediaUrl or fileUrl parameter keys. Attackers can exploit incomplete parameter validation in...

PT-2026-28704

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The Twilio integration webhook handler fails to validate the X-Twilio-Signature on incoming POST requests. When processing media messages, the system fetches URL...