|
cve-2026-100559
|
8.6 (v4.0)
8 (v3.1)
|
OpenClaw before 2026.8.1 Command Injection via Escaped…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:52.489Z |
2026-10-05T14:55:03.674Z |
|
cve-2026-100558
|
8.7 (v4.0)
7.5 (v3.1)
|
OpenClaw before 2026.8.1 Resource Exhaustion via WebSo…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:51.811Z |
2026-09-28T17:38:11.262Z |
|
cve-2026-100557
|
8.7 (v4.0)
8.3 (v3.1)
|
OpenClaw before 2026.8.1 Authorization Bypass via Skil…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:51.129Z |
2026-09-29T17:09:12.332Z |
|
cve-2026-100556
|
5.3 (v4.0)
6.3 (v3.1)
|
OpenClaw before 2026.8.1 Authentication Bypass via Ses…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:50.427Z |
2026-09-30T00:23:16.050Z |
|
cve-2026-100555
|
7.1 (v4.0)
7.1 (v3.1)
|
OpenClaw before 2026.8.1 DNS Rebinding via attachment …
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:49.708Z |
2026-10-05T14:55:03.826Z |
|
cve-2026-100554
|
2.3 (v4.0)
4.2 (v3.1)
|
OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:49.013Z |
2026-09-28T17:38:43.352Z |
|
cve-2026-100553
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:48.240Z |
2026-09-29T17:10:13.838Z |
|
cve-2026-100552
|
8.7 (v4.0)
8.8 (v3.1)
|
OpenClaw before 2026.8.1 Policy Bypass via Native Tools
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:47.510Z |
2026-09-30T00:22:43.390Z |
|
cve-2026-100551
|
9 (v4.0)
8.3 (v3.1)
|
OpenClaw iOS Control UI TLS Pin Enforcement Bypass
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:46.612Z |
2026-10-05T14:55:03.956Z |
|
cve-2026-100550
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenClaw before 2026.8.1 Authentication Bypass via Acc…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:45.885Z |
2026-09-28T17:33:57.811Z |
|
cve-2026-100549
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenClaw before 2026.8.1 Path Traversal via QQBot voic…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:45.168Z |
2026-09-29T17:11:08.601Z |
|
cve-2026-100548
|
6 (v4.0)
5.3 (v3.1)
|
OpenClaw before 2026.8.1 Credential Exposure via Embed…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:43.935Z |
2026-09-30T00:22:11.100Z |
|
cve-2026-100547
|
6.8 (v4.0)
5.5 (v3.1)
|
OpenClaw before 2026.8.1 Authentication Bypass via File URL
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:43.254Z |
2026-10-05T14:55:04.077Z |
|
cve-2026-100546
|
6.1 (v4.0)
6.4 (v3.1)
|
OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypas…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:42.608Z |
2026-09-28T17:46:37.422Z |
|
cve-2026-100545
|
6 (v4.0)
5.3 (v3.1)
|
OpenClaw before 2026.8.1 Policy Bypass via Session Fil…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:41.920Z |
2026-09-29T17:12:44.905Z |
|
cve-2026-100544
|
8.7 (v4.0)
8.8 (v3.1)
|
openclaw voice-call before 2026.8.1 Authorization Bypass
|
openclaw
|
voice-call
|
2026-09-26T02:18:41.249Z |
2026-10-08T15:21:47.105Z |
|
cve-2026-100543
|
7.7 (v4.0)
7.5 (v3.1)
|
OpenClaw before 2026.8.1 Information Disclosure via Co…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:40.572Z |
2026-10-05T14:55:04.226Z |
|
cve-2026-100542
|
2.3 (v4.0)
3.1 (v3.1)
|
OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:39.901Z |
2026-09-28T17:45:49.475Z |
|
cve-2026-100541
|
7.7 (v4.0)
7.5 (v3.1)
|
OpenClaw Matrix before 2026.8.1 Authorization Bypass v…
|
openclaw
|
matrix
|
2026-09-26T02:18:39.224Z |
2026-10-08T15:21:45.988Z |
|
cve-2026-100540
|
7.6 (v4.0)
6.8 (v3.1)
|
OpenClaw Feishu before 2026.8.1 Authentication Bypass …
|
openclaw
|
feishu
|
2026-09-26T02:18:38.549Z |
2026-10-08T15:21:45.390Z |
|
cve-2026-100539
|
2.1 (v4.0)
2.6 (v3.1)
|
OpenClaw before 2026.8.1 Memory Access Control Bypass
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:37.870Z |
2026-10-05T14:55:04.358Z |
|
cve-2026-100538
|
7.1 (v4.0)
6.5 (v3.1)
|
OpenClaw before 2026.8.1 Local File Read via Outbound …
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:37.196Z |
2026-09-28T17:44:58.113Z |
|
cve-2026-100537
|
2.3 (v4.0)
3.1 (v3.1)
|
OpenClaw before 2026.8.1 Authentication Bypass via Act…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:36.522Z |
2026-09-29T17:14:15.316Z |
|
cve-2026-100536
|
7.1 (v4.0)
6.5 (v3.1)
|
OpenClaw before 2026.8.1 Path Traversal via Structured…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:35.827Z |
2026-09-30T00:18:47.510Z |
|
cve-2026-100535
|
7.7 (v4.0)
7.5 (v3.1)
|
OpenClaw before 2026.8.1 Privilege Escalation via Sess…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:35.149Z |
2026-10-05T14:55:04.493Z |
|
cve-2026-100534
|
2.3 (v4.0)
3.1 (v3.1)
|
OpenClaw before 2026.8.1 Session Cancellation Authoriz…
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:34.477Z |
2026-09-28T17:43:08.927Z |
|
cve-2026-100533
|
6 (v4.0)
5.3 (v3.1)
|
OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:33.802Z |
2026-09-29T17:15:49.580Z |
|
cve-2026-100532
|
7.2 (v4.0)
8.1 (v3.1)
|
openclaw WhatsApp before 2026.8.1 Authentication Bypass
|
openclaw
|
whatsapp
|
2026-09-26T02:18:33.146Z |
2026-10-08T15:21:44.766Z |
|
cve-2026-100531
|
7.1 (v4.0)
6.5 (v3.1)
|
openclaw Slack before 2026.8.1 Authorization Bypass
|
openclaw
|
slack
|
2026-09-26T02:18:32.465Z |
2026-10-08T15:21:44.177Z |
|
cve-2026-100530
|
8.5 (v4.0)
7.3 (v3.1)
|
OpenClaw before 2026.8.1 Exec Approval Directory Binding
|
OpenClaw
|
OpenClaw
|
2026-09-26T02:18:31.770Z |
2026-09-28T17:42:13.849Z |