37176 matches found
OpenClaw: system.run allow-always persistence included shell-commented payload tails
OpenClaw's system.run allowlist analysis did not honor POSIX shell comment semantics when deriving allow-always persistence entries. A caller in security=allowlist mode who received an allow-always decision could submit a shell command whose tail was commented out at runtime, for example by using...
Insufficiently Protected Credentials
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchWithSsrFGuard process. An attacker can obtain sensitive authorization credentials by triggering a cross-origin redirect that causes custo...
OpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers
OpenClaw's system.run shell-wrapper detection did not recognize PowerShell -EncodedCommand forms as inline-command wrappers. In allowlist mode, a caller with access to system.run could invoke pwsh or powershell using -EncodedCommand, -enc, or -e, and the request would fall back to plain argv...
Use of GET Request Method With Sensitive Query Strings
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings via the process that appends authentication material to the browser URL query string and persists it in browser localStorage. An...
EUVD-2025-208441
An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223...
EUVD-2025-208427
An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2...
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27. A patched version of the package is available...
CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.6.1-3
CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.6.1-3. A patched version of the package is available...
CVE-2025-11065 affecting package kubevirt for versions less than 0.59.0-38
CVE-2025-11065 affecting package kubevirt for versions less than 0.59.0-38. A patched version of the package is available...
CVE-2025-39772 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39772 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-30204 affecting package dcos-cli for versions less than 1.2.0-24
CVE-2025-30204 affecting package dcos-cli for versions less than 1.2.0-24. A patched version of the package is available...
CVE-2025-47911 affecting package cf-cli for versions less than 8.4.0-27
CVE-2025-47911 affecting package cf-cli for versions less than 8.4.0-27. A patched version of the package is available...
CVE-2025-47911 affecting package helm for versions less than 3.14.2-10
CVE-2025-47911 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...
CVE-2025-47911 affecting package cri-tools for versions less than 1.29.0-9
CVE-2025-47911 affecting package cri-tools for versions less than 1.29.0-9. A patched version of the package is available...
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21. A patched version of the package is available...
CVE-2025-39812 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39812 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39795 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39795 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39697 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39697 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38683 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38683 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...