Execution with Unnecessary Privileges

Overview Affected versions of this package are vulnerable to Execution with Unnecessary Privileges due to the Mint-mode process. An attacker can gain account-wide permissions and perform destructive actions beyond the intended cluster scope by compromising operator credentials. Workaround This...

NPM: OpenClaw: Agent gateway config mutations could change protected operator settings

NPM: OpenClaw: Agent gateway config mutations could change protected operator settings vulnerability discovered by ? in WordPress Npm openclaw versions 2026.4.20...

OpenClaw: Agent gateway config mutations could change protected operator settings

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The agent-facing gateway config.patch / config.apply guard did not cover several operator-trusted settings, including sandbox policy, plugin enablement, gateway auth/TLS, hook...

Insufficient Granularity of Access Control

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficient Granularity of Access Control via insufficient access control in the gateway config.patch and config.apply processes. An attacker can modify protected operator settings by...

GHSA-7JM2-G593-4QRC OpenClaw: Agent gateway config mutations could change protected operator settings

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The agent-facing gateway config.patch / config.apply guard did not cover several operator-trusted settings, including sandbox policy, plugin enablement, gateway auth/TLS, hook...

OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The Control UI assistant-media route authenticated trusted-proxy callers but did not enforce the declared operator scopes for identity-bearing HTTP auth paths. A trusted-proxy...

GHSA-V8QF-FR4G-28P2 OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The Control UI assistant-media route authenticated trusted-proxy callers but did not enforce the declared operator scopes for identity-bearing HTTP auth paths. A trusted-proxy...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-aws-s3-fips, volcano, promxy-fips, crossplane-provider-azure-managedidentity, flux-helm-controller-fips, crossplane-provider-aws-memorydb-fips, traefik-fips, teleport, gitlab-pages, aactl, crossplane-provider-aws-cloudfront,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-aws-s3-fips, volcano, promxy-fips, crossplane-provider-azure-managedidentity, flux-helm-controller-fips, crossplane-provider-aws-memorydb-fips, traefik-fips, teleport, gitlab-pages, aactl, crossplane-provider-aws-cloudfront,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, undock, dataplaneapi, step-ca, vault-env, metallb, argo-events, argocd-image-updater, emissary, crossplane-provider-aws-kinesis, kapp, skopeo, kargo, crossplane-provider-aws-ec2, cri-tools, mesosphere-vsphere-csi,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, undock, dataplaneapi, step-ca, vault-env, metallb, argo-events, argocd-image-updater, emissary, crossplane-provider-aws-kinesis, kapp, skopeo, kargo, crossplane-provider-aws-ec2, cri-tools, mesosphere-vsphere-csi,...

CLEANSTART-2026-YX54699 race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics

Multiple security vulnerabilities affect the strimzi-kafka-operator package. A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. See references for individual vulnerability details...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: frp, harbor, seaweedfs, terraform, cert-manager-csi-driver, dex, spqr, opentofu, k6, grafana, rancher-agent, sftpgo-plugin-auth, flux, juicefs, nuclei, kyverno, cert-manager-istio-csr, kyverno-notation-aws, minio, zot, trufflehog, rancher-webhook, ratify, xeol,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: frp, harbor, seaweedfs, terraform, cert-manager-csi-driver, dex, spqr, opentofu, k6, grafana, rancher-agent, sftpgo-plugin-auth, flux, juicefs, nuclei, kyverno, cert-manager-istio-csr, kyverno-notation-aws, minio, zot, trufflehog, rancher-webhook, ratify, xeol,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: gitea-fips, nuclei, flux-source-controller, cloudbeat, terraform, kyverno-notation-aws-fips, neuvector, flux, sftpgo-plugin-auth, terraform-fips, seaweedfs-rocksdb, cert-manager-google-cas-issuer, minio, yunikorn-k8shim, kyverno-notation-aws, cert-manager-cmctl,...

k8sGPT has Prompt Injection through its k8sGPT-Operator

Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...

GHSA-394X-274P-MQC6 Duplicate Advisory: OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-767m-xrhc-fxm7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write...

Duplicate Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mhr7-2xmv-4c4q. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy...

GHSA-2XP4-QHR4-XQM2 Duplicate Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mhr7-2xmv-4c4q. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy...

EUVD-2026-25331

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks. Attackers can exploit this by sending malicious requests from a browser in trusted-proxy deployments to perform unauthorized...