{"schema_version":"1","data":[{"id":12747,"advisory_id":"bab6b87f-d9a8-4930-b758-be9e3e095ca1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53839","source_published_at":"2026-06-12T21:57:01.963+00:00","published_at":"2026-10-25T00:12:41.042825+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-53839"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation","summary":"OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes instead of exact hostnames. Attackers can exploit this by crafting a hostname prefix resembling a trusted host to send authentication material to untrusted endpoints.","evidence":"cve:CVE-2026-53839","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-53839","aliases":["CVE-2026-53839"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":6,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"MEDIUM","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/openclaw/openclaw","vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.5.7","versionType":"semver"},{"status":"unaffected","version":"2026.5.7","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:23:12.569Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q","https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-53839","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-15T18:12:17.313642Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-15T18:16:13.464Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:23:12.569Z"}}},"related_cves":[{"value":"CVE-2026-53839","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":12746,"advisory_id":"1abc7d4e-a818-432b-bb89-693561feae6d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-53833","source_published_at":"2026-06-12T21:56:57.866+00:00","published_at":"2026-10-25T00:12:40.148915+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-53833"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command","summary":"OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows authenticated senders to mutate configuration without explicit allowFrom restrictions. Attackers can modify QQBot streaming configuration outside intended admin policy by reaching the affected command without non-wildcard allowlist entry requirements.","evidence":"cve:CVE-2026-53833","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-53833","aliases":["CVE-2026-53833"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":7.4,"Automatable":"NOT_DEFINED","attackVector":"LOCAL","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/openclaw/openclaw","vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.4.29","versionType":"semver"},{"status":"unaffected","version":"2026.4.29","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:23:12.003Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6","https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-53833","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-06-15T18:17:32.717266Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-15T18:17:47.370Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:23:12.003Z"}}},"related_cves":[{"value":"CVE-2026-53833","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":12710,"advisory_id":"670f8a2e-bef6-4c5f-920f-081f0389813b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32846","source_published_at":"2026-03-26T16:36:00.657+00:00","published_at":"2026-10-25T00:12:15.25048+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-32846"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read","summary":"OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit incomplete validation and the allowBareFilename bypass to reference files outside the intended application sandbox, resulting in disclosure of sensitive information including system files, environment files, and SSH keys.","evidence":"cve:CVE-2026-32846","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32846","aliases":["CVE-2026-32846"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.3.28","versionType":"semver"},{"status":"unaffected","version":"2026.3.28","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:22:29.291Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-f6pf-4gjx-c94r","https://github.com/openclaw/openclaw/pull/54642","https://github.com/openclaw/openclaw/commit/4797bbc5b96e2cca5532e43b58915c051746fe37","https://www.vulncheck.com/advisories/openclaw-media-parsing-path-traversal-to-arbitrary-file-read"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32846","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-27T14:43:02.829268Z"}}}],"references":[{"url":"https://github.com/openclaw/openclaw/pull/54642","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-27T14:43:07.620Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:22:29.291Z"}}},"related_cves":[{"value":"CVE-2026-32846","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":12708,"advisory_id":"14f9618e-be38-4c1a-84c4-bcc6cd0429f1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32064","source_published_at":"2026-03-21T00:42:29.289+00:00","published_at":"2026-10-25T00:12:13.744094+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-32064"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw < 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC Observer","summary":"OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc without authentication for noVNC observer sessions, allowing unauthenticated access to the VNC interface. Remote attackers on the host loopback interface can connect to the exposed noVNC port to observe or interact with the sandbox browser without credentials.","evidence":"cve:CVE-2026-32064","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32064","aliases":["CVE-2026-32064"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.5,"Automatable":"NOT_DEFINED","attackVector":"LOCAL","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.2.21","versionType":"semver"},{"status":"unaffected","version":"2026.2.21","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:22:23.438Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-25gx-x37c-7pph","https://github.com/openclaw/openclaw/commit/621d8e1312482f122f18c43c72c67211b141da01","https://github.com/openclaw/openclaw/commit/8c1518f0f3e0533593cd2dec3a46c9b746753661","https://www.vulncheck.com/advisories/openclaw-missing-vnc-authentication-in-sandbox-browser-novnc-observer"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32064","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-03-23T17:27:59.360571Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-23T17:28:06.276Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:22:23.438Z"}}},"related_cves":[{"value":"CVE-2026-32064","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8665,"advisory_id":"5dea09e1-cea8-4199-b875-dabd16a18ad8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100596","source_published_at":"2026-09-26T02:19:16.957+00:00","published_at":"2026-10-24T23:04:53.406811+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100596"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration","summary":"OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arbitrary stdio MCP commands that execute with OpenClaw process privileges when configuration loads, compromising host confidentiality, integrity, and availability.","evidence":"cve:CVE-2026-100596","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100596","aliases":["CVE-2026-100596"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:02.332Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100596","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:09:00.603080Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:02.332Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:16.957Z"}}},"related_cves":[{"value":"CVE-2026-100596","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8664,"advisory_id":"db08ad9e-6499-4806-9327-ec923c4f5742","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100592","source_published_at":"2026-09-26T02:19:14.301+00:00","published_at":"2026-10-24T23:04:52.837459+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100592"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming","summary":"OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable the Gateway's Memory Core dreaming behavior, disabling background memory processing or re-enabling durable memory promotion where the owner expected it to remain disabled; the practical confidentiality, integrity, and availability impact depends on stored conversation material and subsequent memory use. Read-only status and help commands remain governed by normal command policy. The issue is fixed in version 2026.7.1. As a workaround, disable dreaming commands in external channels or restrict channel command access to owners.","evidence":"cve:CVE-2026-100592","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100592","aliases":["CVE-2026-100592"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.4.10","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:02.499Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100592","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:08:50.384597Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:02.499Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:14.301Z"}}},"related_cves":[{"value":"CVE-2026-100592","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8663,"advisory_id":"4d8057f5-1d34-4fbd-b614-8414038d77da","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100588","source_published_at":"2026-09-26T02:19:11.643+00:00","published_at":"2026-10-24T23:04:52.177041+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100588"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Authentication Bypass via node.invoke","summary":"OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.invoke method, although direct browser.request access requires administrator scope. In Gateway deployments that honor caller identity and narrower operator scopes, a write-scoped caller with access to a connected browser-capable node can inspect pages, navigate tabs, or interact with browser-visible applications without the configured admin requirement; practical impact depends on the browser profile and signed-in state. Shared-secret token and password callers are considered fully trusted operators under OpenClaw's security model and are not affected. The issue is fixed in 2026.7.1.","evidence":"cve:CVE-2026-100588","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100588","aliases":["CVE-2026-100588"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:02.636Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100588","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:08:37.392976Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:02.636Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:11.643Z"}}},"related_cves":[{"value":"CVE-2026-100588","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8662,"advisory_id":"e4a602b1-e37c-483d-beef-c9ab8c776c9f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100584","source_published_at":"2026-09-26T02:19:08.823+00:00","published_at":"2026-10-24T23:04:51.588108+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100584"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows","summary":"OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory. If lower-trust content can place an executable with an approved basename into an agent-writable workspace and steer an approved PowerShell command that uses a bare executable name, OpenClaw may run the workspace file instead of the allowlisted path, executing arbitrary code with the privileges of the Gateway or node-host user. The issue does not require replacement of the approved executable itself. Version 2026.7.1 contains a fix; as a workaround, avoid bare executable names in approved PowerShell commands and keep executable files out of agent-writable workspaces.","evidence":"cve:CVE-2026-100584","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100584","aliases":["CVE-2026-100584"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.2.26","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:02.786Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100584","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:08:13.762658Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:02.786Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:08.823Z"}}},"related_cves":[{"value":"CVE-2026-100584","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8661,"advisory_id":"a919aceb-4300-447b-b75c-dbadd67a190f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100580","source_published_at":"2026-09-26T02:19:06.136+00:00","published_at":"2026-10-24T23:04:50.993303+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100580"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Remote Code Execution via cron tool","summary":"OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a persistent cron job that executes attacker-selected commands with the privileges of the OpenClaw process user, resulting in access to host files and credentials and impact to scheduled service availability. The issue is limited to cron jobs created or edited through the model-facing cron tool; direct CLI and authorized Gateway scheduling surfaces are trusted operator controls. Fixed in 2026.7.1.","evidence":"cve:CVE-2026-100580","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100580","aliases":["CVE-2026-100580"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:02.909Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100580","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:07:53.601224Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:02.909Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:06.136Z"}}},"related_cves":[{"value":"CVE-2026-100580","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8660,"advisory_id":"6ec67af9-dc74-4c98-88bb-7ef1daa3dd19","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100568","source_published_at":"2026-09-26T02:18:58.162+00:00","published_at":"2026-10-24T23:04:50.395364+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100568"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Unauthorized Command Job Access","summary":"OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secrets and execute operator-authored commands.","evidence":"cve:CVE-2026-100568","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100568","aliases":["CVE-2026-100568"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:03.418Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100568","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:06:29.181481Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:03.418Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:58.162Z"}}},"related_cves":[{"value":"CVE-2026-100568","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8659,"advisory_id":"6ac845b2-92ed-4289-a1ab-8ff5ede958f3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100576","source_published_at":"2026-09-26T02:19:03.527+00:00","published_at":"2026-10-24T23:04:49.805983+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100576"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates","summary":"OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or private destinations without navigation checks applied to other browser actions.","evidence":"cve:CVE-2026-100576","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100576","aliases":["CVE-2026-100576"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:03.097Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100576","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:07:33.940430Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:03.097Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:03.527Z"}}},"related_cves":[{"value":"CVE-2026-100576","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8658,"advisory_id":"a77e62a1-f94b-4068-b73d-9d42dd792e14","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100572","source_published_at":"2026-09-26T02:19:00.905+00:00","published_at":"2026-10-24T23:04:49.174235+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100572"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Denial of Service via Rate Limit","summary":"OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the limit on the raw proxy socket address. In deployments where OpenClaw sits behind a trusted reverse proxy or tunnel and multiple external clients share a single socket address, an unauthenticated sender can exhaust the shared invalid-token budget, causing subsequent legitimate Synology Chat webhook callbacks to be rejected until the rate-limit window expires. The attacker cannot obtain a valid token or read message data; the impact is temporary loss of channel availability. Fixed in 2026.8.1.","evidence":"cve:CVE-2026-100572","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100572","aliases":["CVE-2026-100572"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.3.25","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:03.253Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100572","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:07:19.644447Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:03.253Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:00.905Z"}}},"related_cves":[{"value":"CVE-2026-100572","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8657,"advisory_id":"195c5e79-12c2-49d1-ac3d-6a12eb1e8812","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100563","source_published_at":"2026-09-26T02:18:55.393+00:00","published_at":"2026-10-24T23:04:48.5672+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100563"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels","summary":"OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or the first user message can place a formula-like cell in the Usage export; if an operator opens that export in a spreadsheet application with formula evaluation enabled, the cell may be evaluated with the permissions of the spreadsheet user. OpenClaw itself does not evaluate the formula, and practical impact depends on the spreadsheet application's security settings. The issue is fixed in 2026.8.1.","evidence":"cve:CVE-2026-100563","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100563","aliases":["CVE-2026-100563"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:03.547Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100563","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:05:09.594260Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:03.547Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:55.393Z"}}},"related_cves":[{"value":"CVE-2026-100563","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8656,"advisory_id":"36690265-6baa-407d-94bc-1c4d8c34745b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100547","source_published_at":"2026-09-26T02:18:43.254+00:00","published_at":"2026-10-24T23:04:47.943273+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100547"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Authentication Bypass via File URL","summary":"OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2), alternate but valid `file:` URL spellings supplied over the Agent Client Protocol (ACP) were treated as relative paths and were incorrectly classified as reads scoped to the session working directory. When an operator connected `openclaw acp client` to an untrusted or compromised ACP peer, that peer could request a read of a file outside the session working directory without the approval prompt normally required for that path, resulting in disclosure of local file contents. The demonstrated impact is limited to file confidentiality; mutating and command-capable tool classes are not affected. This issue is fixed in OpenClaw 2026.8.1.","evidence":"cve:CVE-2026-100547","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100547","aliases":["CVE-2026-100547"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.8,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.7.1-2","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:04.077Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100547","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:03:41.533011Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:04.077Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:43.254Z"}}},"related_cves":[{"value":"CVE-2026-100547","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8655,"advisory_id":"b1b7edbf-0a16-451e-8e40-9c486551f33b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100559","source_published_at":"2026-09-26T02:18:52.489+00:00","published_at":"2026-10-24T23:04:47.339622+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100559"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Command Injection via Escaped Newlines","summary":"OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can craft input with escaped newlines to bypass allowlist validation and execute additional commands without expected authorization prompts.","evidence":"cve:CVE-2026-100559","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100559","aliases":["CVE-2026-100559"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:03.674Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100559","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:04:51.398307Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:03.674Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:52.489Z"}}},"related_cves":[{"value":"CVE-2026-100559","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8654,"advisory_id":"2fb41360-10b9-4af3-8e8a-3d88debebed8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100555","source_published_at":"2026-09-26T02:18:49.708+00:00","published_at":"2026-10-24T23:04:46.718741+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100555"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery","summary":"OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to a different destination. When attachment delivery accepted a remotely influenced hostname, an attacker could use DNS rebinding to make the NAS fetch a private or otherwise policy-denied resource and return its contents to the addressed conversation (server-side request forgery). Practical impact depends on NAS routing, resolver behavior, and the response available at the private destination. The issue is fixed in 2026.8.1; as a workaround, disable remote URL attachment forwarding in Synology Chat.","evidence":"cve:CVE-2026-100555","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100555","aliases":["CVE-2026-100555"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"LOW","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.7.1","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:03.826Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100555","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:04:24.718338Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:03.826Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:49.708Z"}}},"related_cves":[{"value":"CVE-2026-100555","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8653,"advisory_id":"bfea991b-6c65-42a3-9864-b2280ee39fed","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100551","source_published_at":"2026-09-26T02:18:46.612+00:00","published_at":"2026-10-24T23:04:46.118197+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100551"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw iOS Control UI TLS Pin Enforcement Bypass","summary":"OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI. While native connections enforced the saved Gateway fingerprint, the authenticated Terminal and session Dashboard WebViews omitted it. If a user had accepted a Gateway fingerprint, an attacker able to redirect the same host and port and present a different certificate that is accepted by iOS system trust can serve a replacement Control UI page; opening the Terminal or a session Dashboard then allows that page to read the injected Gateway token or password. The stolen credential can grant operator access, including reading sensitive Gateway state and invoking host-capable tools. This issue is fixed in 2026.8.11.","evidence":"cve:CVE-2026-100551","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100551","aliases":["CVE-2026-100551"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"PASSIVE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.7.1","lessThan":"2026.8.11","versionType":"semver"},{"status":"unaffected","version":"2026.8.11","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:03.956Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p","https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100551","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:04:17.659802Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:03.956Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:46.612Z"}}},"related_cves":[{"value":"CVE-2026-100551","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8652,"advisory_id":"00309198-1434-4b51-a428-2d468b79fa19","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100527","source_published_at":"2026-09-26T02:18:29.745+00:00","published_at":"2026-10-24T23:04:45.553809+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100527"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.2 Denial of Service via Browser Relay","summary":"OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pending-authentication capacity. Attackers can hold every pending slot by maintaining silent WebSocket upgrades, preventing paired extensions from completing Browser Relay Authentication v2.","evidence":"cve:CVE-2026-100527","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100527","aliases":["CVE-2026-100527"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.2","versionType":"semver"},{"status":"unaffected","version":"2026.8.2","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:04.758Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938","https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100527","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:02:42.599482Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:04.758Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:29.745Z"}}},"related_cves":[{"value":"CVE-2026-100527","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8651,"advisory_id":"c34eaa63-9eda-40be-bfc1-e75d8391685c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100543","source_published_at":"2026-09-26T02:18:40.572+00:00","published_at":"2026-10-24T23:04:44.954285+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100543"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash","summary":"OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as offline password verifiers: a caller able to obtain the redacted configuration (for example via config.get) could test password candidates offline without going through the rate-limited Gateway authentication path. Recovering the password could grant the documented shared-secret operator authority. Secret references were not affected in the same way. The issue is fixed in 2026.8.1.","evidence":"cve:CVE-2026-100543","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100543","aliases":["CVE-2026-100543"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:04.226Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100543","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:03:22.886551Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:04.226Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:40.572Z"}}},"related_cves":[{"value":"CVE-2026-100543","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8650,"advisory_id":"1fe94056-ab8a-41d0-82ed-9529d26c7b74","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100539","source_published_at":"2026-09-26T02:18:37.87+00:00","published_at":"2026-10-24T23:04:44.361245+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100539"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Memory Access Control Bypass","summary":"OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search and memory_get tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit disablement like an unavailable configuration snapshot and restores the stale authority. As a result, during an already-running agent turn the model can continue searching and reading durable memory after the operator revoked that access, for the remainder of that run. Exploitation requires memory to be disabled while a previously created memory tool remains active. The issue is fixed in 2026.8.1.","evidence":"cve:CVE-2026-100539","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-100539","aliases":["CVE-2026-100539"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":2.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":2.6,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:04.358Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100539","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:03:52.018927Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:04.358Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:37.870Z"}}},"related_cves":[{"value":"CVE-2026-100539","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8649,"advisory_id":"016626fe-694b-468e-bae8-f684f8e0e1d7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100535","source_published_at":"2026-09-26T02:18:35.149+00:00","published_at":"2026-10-24T23:04:43.75644+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100535"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Privilege Escalation via Session Memory","summary":"OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender whose messages are admitted with limited tools can persist instructions that are later supplied to an unattended background (dreaming) agent holding broader file and command capabilities, allowing actions beyond the authority of the original turn and affecting files, commands, or services available to that agent. Exploitation requires the content to be captured, selected for later processing, and followed by the model. The issue is fixed in 2026.8.1.","evidence":"cve:CVE-2026-100535","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100535","aliases":["CVE-2026-100535"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.4.5","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:04.493Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100535","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T14:03:06.179071Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:04.493Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:35.149Z"}}},"related_cves":[{"value":"CVE-2026-100535","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4091,"advisory_id":"ef511065-c3d5-4c36-b7f2-31cd5c8d5400","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100597","source_published_at":"2026-09-26T02:19:17.613+00:00","published_at":"2026-10-24T21:45:47.855107+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100597"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Path Traversal via Filesystem Race","summary":"OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safety check, if the path is changed concurrently. An attacker able to win the race can cause a sandboxed operation to delete, create, or rename a host path outside the intended mirror root with the permissions of the OpenClaw process user. This does not require an operator to have granted host filesystem access outside the sandbox. The issue is fixed in 2026.7.1.","evidence":"cve:CVE-2026-100597","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100597","aliases":["CVE-2026-100597"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:30:35.989Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100597","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T00:30:25.759138Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:30:35.989Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:17.613Z"}}},"related_cves":[{"value":"CVE-2026-100597","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4090,"advisory_id":"d7253759-ca51-41c5-9a2e-379078ac09ef","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100593","source_published_at":"2026-09-26T02:19:14.958+00:00","published_at":"2026-10-24T21:45:47.2675+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100593"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Authentication Bypass via activation","summary":"OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent `/activation` policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond more broadly in the group (exposing its responses to additional group traffic) or suppressing expected activation behavior until an owner restores the intended setting. The issue is fixed in version 2026.7.1.","evidence":"cve:CVE-2026-100593","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100593","aliases":["CVE-2026-100593"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:29:57.075Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100593","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T00:29:46.825195Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:29:57.075Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:14.958Z"}}},"related_cves":[{"value":"CVE-2026-100593","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4089,"advisory_id":"c9cfb3b2-b6db-4c94-9c99-155eb1143897","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100585","source_published_at":"2026-09-26T02:19:09.595+00:00","published_at":"2026-10-24T21:45:46.687531+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100585"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel","summary":"OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered through the MCP channel bridge. An authorized non-owner channel sender with channel command access can approve or deny a pending permission request intended for the owner, causing the requested action to proceed without owner consent. The practical impact depends on the pending action and the host capabilities requested by the Claude Code run. The issue is fixed in version 2026.7.1.","evidence":"cve:CVE-2026-100585","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100585","aliases":["CVE-2026-100585"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:28:44.239Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100585","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T00:28:32.638432Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:28:44.239Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:09.595Z"}}},"related_cves":[{"value":"CVE-2026-100585","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4088,"advisory_id":"48b50d27-ea73-4624-b965-ad63c566d1e6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100589","source_published_at":"2026-09-26T02:19:12.328+00:00","published_at":"2026-10-24T21:45:46.104491+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100589"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node","summary":"OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform host browser operations, inspecting or manipulating the connected browser profile and its authenticated state.","evidence":"cve:CVE-2026-100589","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100589","aliases":["CVE-2026-100589"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.7.1","versionType":"semver"},{"status":"unaffected","version":"2026.7.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:29:16.072Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83","https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100589","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T00:29:06.622440Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:29:16.072Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:12.328Z"}}},"related_cves":[{"value":"CVE-2026-100589","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4087,"advisory_id":"fda66df6-de9a-47d1-a2ca-e82fb395871f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100577","source_published_at":"2026-09-26T02:19:04.179+00:00","published_at":"2026-10-24T21:45:45.5411+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100577"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset","summary":"OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the OpenClaw host.","evidence":"cve:CVE-2026-100577","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100577","aliases":["CVE-2026-100577"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:27:11.389Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100577","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T00:27:00.221567Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:27:11.389Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:04.179Z"}}},"related_cves":[{"value":"CVE-2026-100577","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4086,"advisory_id":"490d3efb-8a36-498c-9c6c-6bb668b9acee","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100581","source_published_at":"2026-09-26T02:19:06.796+00:00","published_at":"2026-10-24T21:45:44.912925+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100581"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension","summary":"OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device backups or extracted App Group containers can recover valid Gateway tokens and passwords to authenticate with operator authority.","evidence":"cve:CVE-2026-100581","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100581","aliases":["CVE-2026-100581"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.8,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.11","versionType":"semver"},{"status":"unaffected","version":"2026.8.11","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-30T00:27:46.423Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r","https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100581","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T00:27:35.574477Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:27:46.423Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:06.796Z"}}},"related_cves":[{"value":"CVE-2026-100581","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4085,"advisory_id":"6cf92956-81f7-434f-9c5a-0a21fa2198c0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100573","source_published_at":"2026-09-26T02:19:01.589+00:00","published_at":"2026-10-24T21:45:44.310978+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100573"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback","summary":"OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to invoke tools explicitly denied by sandbox.tools.deny policy. Attackers can list and invoke denied tools to access data or perform actions the operator intended to exclude from the sandbox.","evidence":"cve:CVE-2026-100573","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100573","aliases":["CVE-2026-100573"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":4.8,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:26:34.127Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100573","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T00:26:23.449258Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:26:34.127Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:19:01.589Z"}}},"related_cves":[{"value":"CVE-2026-100573","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4084,"advisory_id":"3c82bdf1-48a4-470e-ad8f-d1aa192bf8f5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100569","source_published_at":"2026-09-26T02:18:58.839+00:00","published_at":"2026-10-24T21:45:43.736965+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100569"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override","summary":"OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment-variable filter did not block variables ending in `_ENDPOINT`, so an untrusted workspace `.env` file could set AZURE_SPEECH_ENDPOINT. Azure Speech preferred that value over the configured region, so when a synthesis or voice-list request was made, the attacker-selected endpoint received the operator's Azure Speech key in the request header, allowing the key to be reused against the operator's Azure Speech resource. Exploitation requires an operator to start OpenClaw in attacker-controlled workspace content with Azure Speech configured with a key and region and no trusted endpoint override set. The issue is fixed in 2026.8.1.","evidence":"cve:CVE-2026-100569","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100569","aliases":["CVE-2026-100569"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.8,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"2026.4.25","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:25:54.448Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100569","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T00:25:41.866412Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:25:54.448Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:58.839Z"}}},"related_cves":[{"value":"CVE-2026-100569","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":4083,"advisory_id":"3d096db1-95f9-4499-8510-454e724885bf","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100564","source_published_at":"2026-09-26T02:18:56.103+00:00","published_at":"2026-10-24T21:45:43.166974+00:00","extraction_method":"structured","technologies":["core-cve","openclaw"],"cve_ids":["CVE-2026-100564"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export","summary":"OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications.","evidence":"cve:CVE-2026-100564","products":[{"name":{"value":"OpenClaw","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100564","aliases":["CVE-2026-100564"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","versions":[{"status":"affected","version":"0","lessThan":"2026.8.1","versionType":"semver"},{"status":"unaffected","version":"2026.8.1","versionType":"semver"}],"packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected"}],"modified":"2026-09-30T00:24:34.147Z","provider":"cve","references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv","https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-30T00:24:23.646268Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T00:24:34.147Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T02:18:56.103Z"}}},"related_cves":[{"value":"CVE-2026-100564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":12747,"next_before":4083}