|
cve-2026-100590
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenClaw before 2026.7.1 Authorization Bypass via voice set
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:12.994Z |
2026-09-28T19:24:36.146Z |
|
cve-2026-100589
|
8.7 (v4.0)
8.3 (v3.1)
|
OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:12.328Z |
2026-09-30T00:29:16.072Z |
|
cve-2026-100588
|
8.7 (v4.0)
8.3 (v3.1)
|
OpenClaw before 2026.7.1 Authentication Bypass via nod…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:11.643Z |
2026-10-05T14:55:02.636Z |
|
cve-2026-100587
|
8.7 (v4.0)
8.8 (v3.1)
|
OpenClaw before 2026.7.1 Authorization Bypass via Code…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:10.955Z |
2026-09-28T17:30:20.127Z |
|
cve-2026-100586
|
8.7 (v4.0)
8.8 (v3.1)
|
OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:10.286Z |
2026-09-28T19:29:47.227Z |
|
cve-2026-100585
|
8.6 (v4.0)
8 (v3.1)
|
OpenClaw before 2026.7.1 Authentication Bypass via MCP…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:09.595Z |
2026-09-30T00:28:44.239Z |
|
cve-2026-100584
|
5.4 (v4.0)
6.7 (v3.1)
|
OpenClaw before 2026.7.1 Allowlist Bypass via Workspac…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:08.823Z |
2026-10-05T14:55:02.786Z |
|
cve-2026-100583
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenClaw Discord before 2026.7.1 Authorization Bypass
|
openclaw
|
discord
|
2026-09-26T02:19:08.137Z |
2026-10-08T15:21:51.055Z |
|
cve-2026-100582
|
7.1 (v4.0)
6.5 (v3.1)
|
OpenClaw Channel Plugins before 2026.8.1 Channel Read …
|
openclaw
|
msteams
|
2026-09-26T02:19:07.452Z |
2026-10-08T15:21:50.196Z |
|
cve-2026-100581
|
6.8 (v4.0)
5.5 (v3.1)
|
OpenClaw iOS before 2026.8.11 Credential Storage via S…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:06.796Z |
2026-09-30T00:27:46.423Z |
|
cve-2026-100580
|
8.7 (v4.0)
8.8 (v3.1)
|
OpenClaw before 2026.7.1 Remote Code Execution via cron tool
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:06.136Z |
2026-10-05T14:55:02.909Z |
|
cve-2026-100579
|
7.2 (v4.0)
7.6 (v3.1)
|
OpenClaw before 2026.7.1 Authentication Bypass via Spo…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:05.472Z |
2026-09-28T17:31:43.702Z |
|
cve-2026-100578
|
7.2 (v4.0)
7.6 (v3.1)
|
OpenClaw before 2026.7.1 Authorization Bypass via chat.send
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:04.806Z |
2026-09-28T19:34:23.662Z |
|
cve-2026-100577
|
5.3 (v4.0)
6.3 (v3.1)
|
OpenClaw before 2026.8.1 Server-Side Request Forgery v…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:04.179Z |
2026-09-30T00:27:11.389Z |
|
cve-2026-100576
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:03.527Z |
2026-10-05T14:55:03.097Z |
|
cve-2026-100575
|
8.7 (v4.0)
8.8 (v3.1)
|
OpenClaw Slack before 2026.8.1 Authentication Bypass v…
|
openclaw
|
slack
|
2026-09-26T02:19:02.877Z |
2026-10-08T15:21:48.531Z |
|
cve-2026-100574
|
8.2 (v4.0)
5.9 (v3.1)
|
OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:02.238Z |
2026-09-29T16:55:39.389Z |
|
cve-2026-100573
|
4.8 (v4.0)
3.3 (v3.1)
|
OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:01.589Z |
2026-09-30T00:26:34.127Z |
|
cve-2026-100572
|
6.9 (v4.0)
5.3 (v3.1)
|
OpenClaw before 2026.8.1 Denial of Service via Rate Limit
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:00.905Z |
2026-10-05T14:55:03.253Z |
|
cve-2026-100571
|
6.9 (v4.0)
5.3 (v3.1)
|
OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:19:00.237Z |
2026-09-28T17:34:34.301Z |
|
cve-2026-100570
|
8.5 (v4.0)
7.8 (v3.1)
|
OpenClaw before 2026.8.1 Remote Code Execution via CLO…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:59.552Z |
2026-09-29T17:04:34.937Z |
|
cve-2026-100569
|
6.8 (v4.0)
5.5 (v3.1)
|
OpenClaw before 2026.8.1 Credential Exposure via Endpo…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:58.839Z |
2026-09-30T00:25:54.448Z |
|
cve-2026-100568
|
8.7 (v4.0)
8.3 (v3.1)
|
OpenClaw before 2026.8.1 Unauthorized Command Job Access
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:58.162Z |
2026-10-05T14:55:03.418Z |
|
cve-2026-100567
|
8.9 (v4.0)
8.2 (v3.1)
|
OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:57.448Z |
2026-09-28T17:36:49.515Z |
|
cve-2026-100566
|
6.9 (v4.0)
6.5 (v3.1)
|
OpenClaw LINE before 2026.8.1 Access Control Inheritance
|
openclaw
|
line
|
2026-09-26T02:18:56.767Z |
2026-10-08T15:21:47.715Z |
|
cve-2026-100564
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenClaw before 2026.8.1 CSV Formula Injection via Att…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:56.103Z |
2026-09-30T00:24:34.147Z |
|
cve-2026-100563
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenClaw before 2026.8.1 CSV Formula Injection via Ses…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:55.393Z |
2026-10-05T14:55:03.547Z |
|
cve-2026-100562
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenClaw before 2026.8.1 Authorization Bypass via sess…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:54.637Z |
2026-09-28T17:37:22.321Z |
|
cve-2026-100561
|
8.6 (v4.0)
8 (v3.1)
|
OpenClaw before 2026.8.1 Authentication Bypass via Exe…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:53.923Z |
2026-09-29T17:08:16.130Z |
|
cve-2026-100560
|
7.7 (v4.0)
7.5 (v3.1)
|
OpenClaw before 2026.8.1 Reusable Exec Approvals Autho…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:53.219Z |
2026-09-30T00:23:58.906Z |