CVE-2026-51903

Technical details for CVE-2026-51903 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-51902

Technical details for CVE-2026-51902 are not publicly available in the provided documents as the entry is currently reserved. Monitor for future updates.

CVE-2026-51863

Technical details for CVE-2026-51863 are not publicly available in the provided documents. Monitor for future updates regarding the affected software and potential impact.

CVE-2026-51851

Technical details for CVE-2026-51851 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-15273

The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in version 4.0.0 . The root cause is insufficient input sanitization and output escaping related to the REQUEST_URI . This flaw allows unauthenticated attackers to inject arbitrary web scripts, which execute...

CVE-2026-100599

OpenClaw versions 2026.5.1 through 2026.7.0 are vulnerable to Remote Code Execution because the googlemeet.chrome command fails to apply the configured exec approval path. The command accepts caller-supplied audio command arrays and executes them on a paired node, bypassing the standard system.ru...

CVE-2026-100598

The OpenClaw (npm package openclaw ) before version 2026.7.1 contains a logic error in how it binds Signal approval reactions . In affected versions, if unrelated outbound messages and a pending approval exist in the same conversation, a reaction intended for an approval request might incorrectly...

CVE-2026-100597

The OpenClaw npm package (openclaw ) prior to version 2026.7.1 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition within OpenShell local mirror filesystem mutation operations. Specifically, the remove, mkdir, and rename operations may target a different filesystem path if the pa...

CVE-2026-100595

OpenClaw versions before 2026.7.1 are vulnerable to an authorization bypass in the diagnostics export command. This flaw allows non-owner channel senders to access restricted host diagnostic bundles , enabling them to retrieve sensitive details regarding the host, configuration, runtime, and conn...

CVE-2026-100596

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass that allows non-owner users to execute MCP configuration changes via the /mcp set and /mcp unset commands. By exploiting this flaw, an attacker can persist arbitrary stdio MCP commands which execute with the OpenClaw...

CVE-2026-100594

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the /export-trajectory endpoint. Due to insufficient authorization checks, non-owner senders can request and receive owner-only trajectory bundles. This allows attackers to access sensitive data from affected sess...

CVE-2026-100592

The OpenClaw agent gateway (distributed via npm) versions >= 2026.4.10 and

CVE-2026-100593

The OpenClaw npm package (openclaw) versions prior to 2026.7.1 fail to enforce an owner-only requirement for persistent /activation policy changes in group channels. This allows an authorized non-owner channel sender to modify whether the agent requires mention-based activation. Consequently, the...

CVE-2026-100591

The OpenClaw agent gateway (npm-distributed) is vulnerable in versions prior to 2026.7.1 due to missing owner authorization checks on Active Memory global toggle mutations. An authorized non-owner external-channel sender can persistently enable or disable Active Memory for the Gateway. This allow...

CVE-2026-100589

OpenClaw versions before 2026.7.1 are vulnerable to a sandbox bypass in the browser tool. Despite an allowHostControl=false configuration, sandboxed sessions can access paired node browser actions. Attackers who control sandboxed agent input can select a paired node to perform host browser operat...

CVE-2026-100590

Versions of OpenClaw before 2026.7.1 are vulnerable to an authorization bypass in the /voice set command. This flaw allows non-owner external-channel senders to persist Gateway voice configuration . An attacker with command access can modify the voice used for Talk responses from a configured pro...

CVE-2026-100588

The OpenClaw npm package (openclaw ) versions prior to 2026.7.1 contain an authentication bypass vulnerability. The issue arises because the software fails to enforce administrator scope requirements for browser control when accessed via the node.invoke method, even though direct access via brows...

CVE-2026-100586

Versions of OpenClaw Codex prior to 2026.7.1 are vulnerable to an authorization bypass when creating native conversation bindings. The root cause is a failure to properly enforce owner authorization, allowing non-owner channel senders with command access to create bindings to the native Codex run...

CVE-2026-100587

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the Codex computer-use installation command . The flaw occurs because the system fails to properly validate owner authorization, allowing non-owner channel senders to install arbitrary plugins and execute MCP proc...

CVE-2026-100585

The OpenClaw npm package (openclaw) versions prior to 2026.7.1 contains an authorization bypass vulnerability. The software fails to enforce an owner-only requirement for Claude Code permission prompts sent via the MCP channel bridge . This allows an authorized non-owner channel sender with comma...