← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32922
OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate
CVE-2026-32921
OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run
CVE-2026-32919
OpenClaw < 2026.3.11 - Unauthorized Session Reset via agent Slash Commands
CVE-2026-32918
OpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool
CVE-2026-32916
OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes
CVE-2026-32915
OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface
CVE-2026-32914
OpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints
CVE-2026-32899
OpenClaw < 2026.2.25 - Sender Policy Bypass in Slack Reaction and Pin Event Handlers
CVE-2026-32895
OpenClaw < 2026.2.26 - Sender Authorization Bypass in Slack System Event Handlers
CVE-2026-32067
OpenClaw < 2026.2.26 - Cross-Account Authorization Bypass in DM Pairing Store