← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32038
OpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter
CVE-2026-22177
OpenClaw < 2026.2.21 - Environment Variable Injection via Config env.vars
CVE-2026-100559
OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
CVE-2026-27646
OpenClaw < 2026.3.7 - Sandbox Escape via /acp spawn Command
CVE-2026-27183
OpenClaw < 2026.3.7 - Shell Approval Gating Bypass via Dispatch Wrapper Depth Mismatch
CVE-2026-35653
OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request
CVE-2026-35640
OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing
CVE-2026-35635
OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat
CVE-2026-35631
OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands
CVE-2026-35620
OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands