CVE-2026-32028

OpenClaw versions prior to 2026.2.25 fail to enforce dmPolicy and allowFrom authorization checks on Discord direct-message reaction notifications, allowing non-allowlisted users to enqueue reaction-derived system events. Attackers can exploit this inconsistency by reacting to bot-authored DM...

Content Switch Virtual Server goes down when the LB VIP bound goes down

The Content Switching Virtual Server goes down if even one of the Load Balancing Virtual Server configured at the back of Content Switch Policy goes down...