CVE-2026-52931

In the Linux kernel, the batman-adv TP meter logic could access sender-only fields when tp_vars had the BATADV_TP_RECEIVER role, causing undefined behavior. Specifically, batadv_tp_recv_ack() and batadv_tp_stop() are only valid for BATADV_TP_SENDER; if invoked while in the receiver role (e.g., wh...

User Impersonation

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to User Impersonation via the moderation action handling process. An attacker can perform unauthorized moderation actions by spoofing sender identity fields in tool-driven flows. Note: This ...