GHSA-7JM2-G593-4QRC OpenClaw: Agent gateway config mutations could change protected operator settings

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The agent-facing gateway config.patch / config.apply guard did not cover several operator-trusted settings, including sandbox policy, plugin enablement, gateway auth/TLS, hook...

Insufficient Granularity of Access Control

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficient Granularity of Access Control via insufficient access control in the gateway config.patch and config.apply processes. An attacker can modify protected operator settings by...

OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The Control UI assistant-media route authenticated trusted-proxy callers but did not enforce the declared operator scopes for identity-bearing HTTP auth paths. A trusted-proxy...

GHSA-V8QF-FR4G-28P2 OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The Control UI assistant-media route authenticated trusted-proxy callers but did not enforce the declared operator scopes for identity-bearing HTTP auth paths. A trusted-proxy...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, trivy, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, cloud-provider-azure, crossplane-provider-aws-dynamodb, gitlab-operator, crossplane-provider-aws-elb-fips, gitlab-operator-fips,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, trivy, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, cloud-provider-azure, crossplane-provider-aws-dynamodb, gitlab-operator, crossplane-provider-aws-elb-fips, gitlab-operator-fips,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, kubernetes-csi-driver-hostpath, spark-operator, crossplane-provider-aws-memorydb, cadvisor, k8ssandra-client, vault-env, kserve, kserve-modelmesh-serving, kuberay-operator, gitlab-pages, nerdctl, cilium, skopeo, step-issuer, kapp,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, kubernetes-csi-driver-hostpath, spark-operator, crossplane-provider-aws-memorydb, cadvisor, k8ssandra-client, vault-env, kserve, kserve-modelmesh-serving, kuberay-operator, gitlab-pages, nerdctl, cilium, skopeo, step-issuer, kapp,...

CLEANSTART-2026-YX54699 race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics

Multiple security vulnerabilities affect the strimzi-kafka-operator package. A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. See references for individual vulnerability details...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, juicefs, opentofu, telegraf, rancher, rancher-agent, kyverno-notation-aws, trufflehog, ratify, cert-manager-istio-csr, zot, spqr, dex, percona-server-mongodb-operator, bento, terraform, cert-manager-cmctl, grafana, rancher-webhook,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, juicefs, opentofu, telegraf, rancher, rancher-agent, kyverno-notation-aws, trufflehog, ratify, cert-manager-istio-csr, zot, spqr, dex, percona-server-mongodb-operator, bento, terraform, cert-manager-cmctl, grafana, rancher-webhook,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: kyverno-fips, yunikorn-k8shim-fips, zot, seaweedfs-fips, zitadel, beats, agentbeat-fips, cert-manager-fips, kyverno-notation-aws-fips, yunikorn-k8shim, versitygw, flux, k6, openbao-fips, k6-fips, neuvector-fips, opentofu, xeol-fips, syncthing, cert-manager-cmctl,...

k8sGPT has Prompt Injection through its k8sGPT-Operator

Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...

GHSA-394X-274P-MQC6 Duplicate Advisory: OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-767m-xrhc-fxm7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write...

EUVD-2026-25331

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by sending malicious requests from a browser in trusted-proxy deployments to perform unauthorized...

GHSA-2XP4-QHR4-XQM2 Duplicate Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mhr7-2xmv-4c4q. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy...

Duplicate Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mhr7-2xmv-4c4q. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy...

CVE-2026-41347

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by sending malicious requests from a browser in trusted-proxy deployments to perform unauthorized...

CVE-2026-41359

OpenClaw prior to version 2026.3.28 contains a privilege escalation vulnerability. Authenticated operators with write permissions can access admin-class Telegram configuration and cron persistence settings via the send endpoint due to insufficient access controls. The CVE entry notes a CVSS v3.1/...

CVE-2026-41359 OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...