CVE-2026-100593

OpenClaw npm package openclaw before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond mor...

CVE-2026-100595 OpenClaw before 2026.7.1 Authorization Bypass via diagnostics

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and...

CVE-2026-100595

OpenClaw versions before 2026.7.1 are vulnerable to an authorization bypass in the diagnostics export command. This flaw allows non-owner channel senders to access restricted host diagnostic bundles , enabling them to retrieve sensitive details regarding the host, configuration, runtime, and conn...

EUVD-2026-87456

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host diagnostic bundles. Attackers can request and receive diagnostic details about the host, configuration, runtime, and...

CVE-2026-100594 OpenClaw before 2026.7.1 Authorization Bypass via trajectory export

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and receive owner-only trajectory bundles. Attackers can access prompts, model messages, tool schemas, runtime events, and local path metadat...

CVE-2026-100594

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the /export-trajectory endpoint. Due to insufficient authorization checks, non-owner senders can request and receive owner-only trajectory bundles. This allows attackers to access sensitive data from affected sess...

EUVD-2026-87458

OpenClaw npm package openclaw before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond mor...

CVE-2026-100593 OpenClaw before 2026.7.1 Authentication Bypass via activation

OpenClaw npm package openclaw before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond mor...

CVE-2026-100591

The OpenClaw agent gateway (npm-distributed) is vulnerable in versions prior to 2026.7.1 due to missing owner authorization checks on Active Memory global toggle mutations. An authorized non-owner external-channel sender can persistently enable or disable Active Memory for the Gateway. This allow...

CVE-2026-100532

The @openclaw/whatsapp (npm) package, in versions prior to 2026.8.1 , contains a vulnerability where the WhatsApp login tool is exposed via the generic channel-tool path. The flaw occurs because the system fails to preserve the originating sender's owner status, leading to a bypass of the owner-o...

CVE-2026-17349 pgAdmin 4: Adhoc server clone leaks another user's stored database credentials and ownership to a non-owner

/misc/workspace/adhocconnectserver, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of an existing server, clones that server via Server.clone, which copies every column from the source row, including userid, shared, sharedusername, and the stored credential fields...

Duplicate Advisory: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gq66-9cw5-j5jm. This link is maintained to preserve external references. Original Description n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based...

CVE-2026-65596

n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials Header Auth, Basic Auth, Query Auth, OAuth in the GraphQL node, unlike the HTTP Request node. An authenticated user able to create or edit workflows can point the node...

CVE-2026-65596

The CVE-2026-65596 issue affects n8n GraphQL node: it fails to enforce the Allowed HTTP Request Domains restriction on credentials used by GraphQL-based HTTP credentials (Header/Auth, Basic, Query, OAuth). Affected releases are n8n before 1.123.64, 2.29.8, and 2.30.1. An authenticated user who ca...

EUVD-2026-47640

n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials Header Auth, Basic Auth, Query Auth, OAuth in the GraphQL node, unlike the HTTP Request node. An authenticated user able to create or edit workflows can point the node...

CVE-2026-65596 n8n before 1.123.64 Credential Exfiltration via GraphQL Node

n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials Header Auth, Basic Auth, Query Auth, OAuth in the GraphQL node, unlike the HTTP Request node. An authenticated user able to create or edit workflows can point the node...

PT-2026-63354

n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials Header Auth, Basic Auth, Query Auth, OAuth in the GraphQL node, unlike the HTTP Request node. An authenticated user able to create or edit workflows can point the node...

CVE-2026-50007

Actual is an open-source personal finance application. Prior to 26.7.0, a missing authorization issue allows a shared user with useraccess on a budget file to perform owner-only file management actions. A non-owner shared user can call file-management endpoints intended for higher-privilege users...

CVE-2026-50007

The CVE affects the open-source personal finance app “Actual.” Before version 26.7.0, a missing authorization flaw allows a non-owner shared user (with user_access on a budget file) to perform file-management actions that should be owner- or admin-only. Specifically, endpoints such as /delete-use...

CVE-2026-50007

Actual is an open-source personal finance application. Prior to 26.7.0, a missing authorization issue allows a shared user with useraccess on a budget file to perform owner-only file management actions. A non-owner shared user can call file-management endpoints intended for higher-privilege users...