#808 by GitHub stars

prompt-security/clawsec

A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.

Claude Code Codex Security

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

`skills/claw-release/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/clawsec-clawhub-checker/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/clawsec-feed/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/clawsec-nanoclaw/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/clawsec-scanner/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/clawsec-suite/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/clawtributor/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/hermes-attestation-guardian/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/hermes-traffic-guardian/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/nanoclaw-traffic-guardian/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/openclaw-audit-watchdog/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/openclaw-traffic-guardian/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/picoclaw-security-guardian/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/picoclaw-self-pen-testing/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/picoclaw-traffic-guardian/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

`skills/soul-guardian/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

e46beec4f559 → e46beec4f559

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → e46beec4f559

No earlier version was observed for comparison.

Compare on GitHub

View on GitHub Add to my skills

Verified commit e46beec4f559e15c57d250023298391253e9ce43

Version-pinned installation · Claude Code

git clone --filter=blob:none --no-checkout https://github.com/prompt-security/clawsec.git .hotskills/prompt-security-clawsec && git -C .hotskills/prompt-security-clawsec checkout --detach e46beec4f559e15c57d250023298391253e9ce43
# Copy each selected skill directory from .hotskills/prompt-security-clawsec into .claude/skills/<skill-name>/

Version-pinned installation · Codex

git clone --filter=blob:none --no-checkout https://github.com/prompt-security/clawsec.git .hotskills/prompt-security-clawsec && git -C .hotskills/prompt-security-clawsec checkout --detach e46beec4f559e15c57d250023298391253e9ce43
# Copy each selected skill directory from .hotskills/prompt-security-clawsec into .agents/skills/<skill-name>/

1.1kGitHub stars

5stars in 7 days

16skills in this repository

7commits in 30 days

Heat

4.0

Star growth, last 7 daysAhead of 70% of tracked repositories
Star growth, last 24 hoursAhead of 2% of tracked repositories
Rank movement, last 7 daysAhead of 20% of tracked repositories
Commits, last 30 daysAhead of 73% of tracked repositories
Accounts asking about it through MCP, last 7 daysNot available
Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Individual skills in this repository

claw-release skills/claw-release
clawsec-clawhub-checker skills/clawsec-clawhub-checker
clawsec-feed skills/clawsec-feed
clawsec-nanoclaw skills/clawsec-nanoclaw
clawsec-scanner skills/clawsec-scanner
clawsec-suite skills/clawsec-suite
clawtributor skills/clawtributor
hermes-attestation-guardian skills/hermes-attestation-guardian
hermes-traffic-guardian skills/hermes-traffic-guardian
nanoclaw-traffic-guardian skills/nanoclaw-traffic-guardian
openclaw-audit-watchdog skills/openclaw-audit-watchdog
openclaw-traffic-guardian skills/openclaw-traffic-guardian
picoclaw-security-guardian skills/picoclaw-security-guardian
picoclaw-self-pen-testing skills/picoclaw-self-pen-testing
picoclaw-traffic-guardian skills/picoclaw-traffic-guardian
soul-guardian skills/soul-guardian

How it works

Choose a skill

claw-release

When your agent uses it

Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.

What it loads into context

Frontmatter

103 tokens

Always available to the agent

SKILL.md

2,122 tokens

When the skill is activated

Reference documents

82,728 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Vercel Skills Installation
Operational Notes
Release Artifact Verification
Quick Reference
Release Workflow
Undo a Release (Before Push)
Pre-release Versions
Common Issues
Internal Skills
Existing Skills
Verification Checklist
License

Scripts executed separately

../../scripts/release-skill.sh
../clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjs
../clawsec-clawhub-checker/scripts/check_clawhub_reputation.mjs
../clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs
../clawsec-clawhub-checker/scripts/setup_reputation_hook.mjs
../clawsec-clawhub-checker/test/reputation_check.test.mjs
../clawsec-clawhub-checker/test/setup_reputation_hook.test.mjs
../clawsec-nanoclaw/guardian/integrity-monitor.ts
../clawsec-nanoclaw/host-services/advisory-cache.ts
../clawsec-nanoclaw/host-services/integrity-handler.ts
../clawsec-nanoclaw/host-services/ipc-handlers.ts
../clawsec-nanoclaw/host-services/skill-signature-handler.ts
../clawsec-nanoclaw/lib/advisories.ts
../clawsec-nanoclaw/lib/local_file_io.ts
../clawsec-nanoclaw/lib/risk.ts
../clawsec-nanoclaw/lib/signatures.ts
../clawsec-nanoclaw/lib/types.ts
../clawsec-nanoclaw/mcp-tools/advisory-tools.ts
../clawsec-nanoclaw/mcp-tools/integrity-tools.ts
../clawsec-nanoclaw/mcp-tools/signature-verification.ts
../clawsec-nanoclaw/test/security-hardening.test.mjs
../clawsec-scanner/hooks/clawsec-scanner-hook/handler.ts
../clawsec-scanner/lib/report.mjs
../clawsec-scanner/lib/types.ts
../clawsec-scanner/lib/utils.mjs
../clawsec-scanner/scripts/.gitkeep
../clawsec-scanner/scripts/dast_hook_executor.mjs
../clawsec-scanner/scripts/dast_runner.mjs
../clawsec-scanner/scripts/query_cve_databases.mjs
../clawsec-scanner/scripts/runner.sh
../clawsec-scanner/scripts/sast_analyzer.mjs
../clawsec-scanner/scripts/scan_dependencies.mjs
../clawsec-scanner/scripts/setup_scanner_hook.mjs
../clawsec-scanner/test/cve_integration.test.mjs
../clawsec-scanner/test/dast_harness.test.mjs
../clawsec-scanner/test/dependency_scanner.test.mjs
../clawsec-scanner/test/lib/test_harness.mjs
../clawsec-scanner/test/reviewer_regressions.test.mjs
../clawsec-scanner/test/sast_engine.test.mjs
../clawsec-suite/hooks/clawsec-advisory-guardian/handler.ts
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/advisory_scope.mjs
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/feed.mjs
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/local_file_io.mjs
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/matching.ts
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/state.ts
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/suppression.mjs
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/types.ts
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/utils.mjs
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/version.mjs
../clawsec-suite/scripts/discover_skill_catalog.mjs
../clawsec-suite/scripts/generate_checksums_json.mjs
../clawsec-suite/scripts/guarded_skill_install.mjs
../clawsec-suite/scripts/local_file_io.mjs
../clawsec-suite/scripts/setup_advisory_cron.mjs
../clawsec-suite/scripts/setup_advisory_hook.mjs
../clawsec-suite/scripts/sign_detached_ed25519.mjs
../clawsec-suite/scripts/verify_detached_ed25519.mjs
../clawsec-suite/test/advisory_application_scope.test.mjs
../clawsec-suite/test/advisory_suppression.test.mjs
../clawsec-suite/test/feed_verification.test.mjs
../clawsec-suite/test/fuzz_properties.js
../clawsec-suite/test/fuzz_properties.test.mjs
../clawsec-suite/test/fuzz_semver_scope_suppression.test.mjs
../clawsec-suite/test/guarded_install.test.mjs
../clawsec-suite/test/heartbeat_version_check.test.mjs
../clawsec-suite/test/lib/test_harness.mjs
../clawsec-suite/test/path_resolution.test.mjs
../clawsec-suite/test/setup_disclosure.test.mjs
../clawsec-suite/test/skill_catalog_discovery.test.mjs
../hermes-attestation-guardian/lib/attestation.mjs
../hermes-attestation-guardian/lib/cron.mjs
../hermes-attestation-guardian/lib/diff.mjs
../hermes-attestation-guardian/lib/feed.mjs
../hermes-attestation-guardian/lib/semver.mjs
../hermes-attestation-guardian/scripts/check_advisories.mjs
../hermes-attestation-guardian/scripts/generate_attestation.mjs
../hermes-attestation-guardian/scripts/guarded_skill_verify.mjs
../hermes-attestation-guardian/scripts/refresh_advisory_feed.mjs
../hermes-attestation-guardian/scripts/setup_advisory_check_cron.mjs
../hermes-attestation-guardian/scripts/setup_attestation_cron.mjs
../hermes-attestation-guardian/scripts/verify_attestation.mjs
../hermes-attestation-guardian/test/attestation_cli.test.mjs
../hermes-attestation-guardian/test/attestation_diff.test.mjs
../hermes-attestation-guardian/test/attestation_schema.test.mjs
../hermes-attestation-guardian/test/feed_verification.test.mjs
../hermes-attestation-guardian/test/guarded_skill_verify.test.mjs
../hermes-attestation-guardian/test/hermes_attestation_sandbox_regression.sh
../hermes-attestation-guardian/test/setup_advisory_check_cron.test.mjs
../hermes-attestation-guardian/test/setup_attestation_cron.test.mjs
../hermes-traffic-guardian/scripts/.gitkeep
../openclaw-audit-watchdog/scripts/codex_review.sh
../openclaw-audit-watchdog/scripts/load_suppression_config.mjs
../openclaw-audit-watchdog/scripts/render_report.mjs
../openclaw-audit-watchdog/scripts/run_audit_and_format.sh
../openclaw-audit-watchdog/scripts/runner.sh
../openclaw-audit-watchdog/scripts/send_smtp.mjs
../openclaw-audit-watchdog/scripts/sendmail_report.sh
../openclaw-audit-watchdog/scripts/setup_cron.mjs
../openclaw-audit-watchdog/test/render_report_suppression.test.mjs
../openclaw-audit-watchdog/test/setup_cron.test.mjs
../openclaw-audit-watchdog/test/suppression_config.test.mjs
../openclaw-audit-watchdog/test/suppression_config_fuzz.test.mjs
../openclaw-traffic-guardian/scripts/.gitkeep
../picoclaw-security-guardian/lib/advisories.mjs
../picoclaw-security-guardian/lib/drift.mjs
../picoclaw-security-guardian/lib/profile.mjs
../picoclaw-security-guardian/lib/supply_chain.mjs
../picoclaw-security-guardian/scripts/check_advisories.mjs
../picoclaw-security-guardian/scripts/check_drift.mjs
../picoclaw-security-guardian/scripts/generate_profile.mjs
../picoclaw-security-guardian/scripts/verify_supply_chain.mjs
../picoclaw-security-guardian/test/advisories.test.mjs
../picoclaw-security-guardian/test/drift.test.mjs
../picoclaw-security-guardian/test/picoclaw_security_guardian_sandbox_regression.sh
../picoclaw-security-guardian/test/profile.test.mjs
../picoclaw-security-guardian/test/supply_chain.test.mjs
../picoclaw-self-pen-testing/lib/format.mjs
../picoclaw-self-pen-testing/lib/self_pen_test.mjs
../picoclaw-self-pen-testing/scripts/self_pen_test.mjs
../picoclaw-self-pen-testing/test/self_pen_test.test.mjs
../picoclaw-traffic-guardian/scripts/.gitkeep
../soul-guardian/scripts/install_launchd_plist.py
../soul-guardian/scripts/onboard_state_dir.py
../soul-guardian/scripts/soul_guardian.py
../soul-guardian/scripts/test_install_launchd_plist.py
../soul-guardian/scripts/test_soul_guardian.py

Files

../../.claude-plugin/marketplace.jsonasset1,235 bytes
../../README.mddoc8,314 bytes
../../advisories/feed-signing-public.pemasset113 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.jsonasset1,622,753 bytes
../../advisories/feed.json.sigasset88 bytes
../../scripts/release-skill.shruns13,019 bytes
.clawhubignoreasset147 bytes
CHANGELOG.mddoc1,424 bytes
README.mddoc304 bytes
SKILL.mdcore7,629 bytes
SKILL.mdcore7,629 bytes
SKILL.mdcore7,629 bytes
SKILL.mdcore7,629 bytes
SKILL.mdcore7,629 bytes
SKILL.mdcore7,629 bytes
SKILL.mdcore7,629 bytes
SKILL.mdcore7,629 bytes
skill.jsonasset1,725 bytes
../clawsec-clawhub-checker/.clawhubignoreasset6 bytes
../clawsec-clawhub-checker/CHANGELOG.mddoc2,968 bytes
../clawsec-clawhub-checker/README.mddoc2,307 bytes
../clawsec-clawhub-checker/SKILL.mddoc6,067 bytes
../clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjsruns3,795 bytes
../clawsec-clawhub-checker/scripts/check_clawhub_reputation.mjsruns9,841 bytes
../clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjsruns7,731 bytes
../clawsec-clawhub-checker/scripts/setup_reputation_hook.mjsruns2,115 bytes
../clawsec-clawhub-checker/skill.jsonasset3,526 bytes
../clawsec-clawhub-checker/test/reputation_check.test.mjsruns17,872 bytes
../clawsec-clawhub-checker/test/setup_reputation_hook.test.mjsruns3,305 bytes
../clawsec-feed/.clawhubignoreasset147 bytes
../clawsec-feed/CHANGELOG.mddoc2,461 bytes
../clawsec-feed/README.mddoc2,406 bytes
../clawsec-feed/SKILL.mddoc28,618 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.jsonasset1,622,753 bytes
../clawsec-feed/advisories/feed.json.sigasset88 bytes
../clawsec-feed/skill.jsonasset2,118 bytes
../clawsec-nanoclaw/CHANGELOG.mddoc3,617 bytes
../clawsec-nanoclaw/INSTALL.mddoc9,616 bytes
../clawsec-nanoclaw/README.mddoc5,416 bytes
../clawsec-nanoclaw/SKILL.mddoc8,507 bytes
../clawsec-nanoclaw/advisories/feed-signing-public.pemasset113 bytes
../clawsec-nanoclaw/docs/INTEGRITY.mddoc13,850 bytes
../clawsec-nanoclaw/docs/SKILL_SIGNING.mddoc14,939 bytes
../clawsec-nanoclaw/guardian/integrity-monitor.tsruns21,442 bytes
../clawsec-nanoclaw/guardian/policy.jsonasset1,745 bytes
../clawsec-nanoclaw/host-services/advisory-cache.tsruns11,102 bytes
../clawsec-nanoclaw/host-services/integrity-handler.tsruns10,995 bytes
../clawsec-nanoclaw/host-services/ipc-handlers.tsruns3,378 bytes
../clawsec-nanoclaw/host-services/skill-signature-handler.tsruns7,632 bytes
../clawsec-nanoclaw/lib/advisories.tsruns14,982 bytes
../clawsec-nanoclaw/lib/local_file_io.tsruns316 bytes
../clawsec-nanoclaw/lib/risk.tsruns2,501 bytes
../clawsec-nanoclaw/lib/signatures.tsruns14,129 bytes
../clawsec-nanoclaw/lib/types.tsruns6,059 bytes
../clawsec-nanoclaw/mcp-tools/advisory-tools.tsruns13,249 bytes
../clawsec-nanoclaw/mcp-tools/integrity-tools.tsruns8,318 bytes
../clawsec-nanoclaw/mcp-tools/signature-verification.tsruns7,025 bytes
../clawsec-nanoclaw/skill.jsonasset4,949 bytes
../clawsec-nanoclaw/test/security-hardening.test.mjsruns7,060 bytes
../clawsec-scanner/CHANGELOG.mddoc2,189 bytes
../clawsec-scanner/README.mddoc451 bytes
../clawsec-scanner/SKILL.mddoc16,498 bytes
../clawsec-scanner/hooks/.gitkeepasset0 bytes
../clawsec-scanner/hooks/clawsec-scanner-hook/HOOK.mddoc3,676 bytes
../clawsec-scanner/hooks/clawsec-scanner-hook/handler.tsruns9,535 bytes
../clawsec-scanner/lib/.gitkeepasset0 bytes
../clawsec-scanner/lib/report.mjsruns8,204 bytes
../clawsec-scanner/lib/types.tsruns923 bytes
../clawsec-scanner/lib/utils.mjsruns3,568 bytes
../clawsec-scanner/scripts/.gitkeepruns0 bytes
../clawsec-scanner/scripts/dast_hook_executor.mjsruns3,809 bytes
../clawsec-scanner/scripts/dast_runner.mjsruns15,455 bytes
../clawsec-scanner/scripts/query_cve_databases.mjsruns8,892 bytes
../clawsec-scanner/scripts/runner.shruns9,574 bytes
../clawsec-scanner/scripts/sast_analyzer.mjsruns8,621 bytes
../clawsec-scanner/scripts/scan_dependencies.mjsruns10,147 bytes
../clawsec-scanner/scripts/setup_scanner_hook.mjsruns3,770 bytes
../clawsec-scanner/skill.jsonasset3,662 bytes
../clawsec-scanner/skill.jsonasset3,662 bytes
../clawsec-scanner/test/.gitkeepasset0 bytes
../clawsec-scanner/test/cve_integration.test.mjsruns18,916 bytes
../clawsec-scanner/test/dast_harness.test.mjsruns10,309 bytes
../clawsec-scanner/test/dependency_scanner.test.mjsruns18,770 bytes
../clawsec-scanner/test/lib/test_harness.mjsruns2,426 bytes
../clawsec-scanner/test/reviewer_regressions.test.mjsruns7,614 bytes
../clawsec-scanner/test/sast_engine.test.mjsruns17,894 bytes
../clawsec-suite/.clawhubignoreasset214 bytes
../clawsec-suite/CHANGELOG.mddoc13,938 bytes
../clawsec-suite/HEARTBEAT.mddoc8,112 bytes
../clawsec-suite/README.mddoc381 bytes
../clawsec-suite/SKILL.mddoc16,910 bytes
../clawsec-suite/advisories/feed-signing-public.pemasset113 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.jsonasset1,622,753 bytes
../clawsec-suite/advisories/feed.json.sigasset88 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/HOOK.mddoc2,072 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/handler.tsruns8,809 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/advisory_scope.mjsruns1,197 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/feed.mjsruns17,534 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/local_file_io.mjsruns131 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/matching.tsruns6,261 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/state.tsruns2,475 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/suppression.mjsruns5,483 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/types.tsruns1,087 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/utils.mjsruns3,656 bytes
../clawsec-suite/hooks/clawsec-advisory-guardian/lib/version.mjsruns7,386 bytes
../clawsec-suite/scripts/discover_skill_catalog.mjsruns8,634 bytes
../clawsec-suite/scripts/generate_checksums_json.mjsruns2,176 bytes
../clawsec-suite/scripts/guarded_skill_install.mjsruns9,878 bytes
../clawsec-suite/scripts/local_file_io.mjsruns131 bytes
../clawsec-suite/scripts/setup_advisory_cron.mjsruns3,465 bytes
../clawsec-suite/scripts/setup_advisory_hook.mjsruns3,066 bytes
../clawsec-suite/scripts/sign_detached_ed25519.mjsruns1,689 bytes
../clawsec-suite/scripts/verify_detached_ed25519.mjsruns1,847 bytes
../clawsec-suite/skill.jsonasset9,714 bytes
../clawsec-suite/test/advisory_application_scope.test.mjsruns2,705 bytes
../clawsec-suite/test/advisory_suppression.test.mjsruns12,971 bytes
../clawsec-suite/test/feed_verification.test.mjsruns20,496 bytes
../clawsec-suite/test/fuzz_properties.jsruns2,004 bytes
../clawsec-suite/test/fuzz_properties.test.mjsruns529 bytes
../clawsec-suite/test/fuzz_semver_scope_suppression.test.mjsruns5,417 bytes
../clawsec-suite/test/guarded_install.test.mjsruns13,849 bytes
../clawsec-suite/test/heartbeat_version_check.test.mjsruns6,876 bytes
../clawsec-suite/test/lib/.gitkeepasset0 bytes
../clawsec-suite/test/lib/test_harness.mjsruns4,722 bytes
../clawsec-suite/test/path_resolution.test.mjsruns4,714 bytes
../clawsec-suite/test/setup_disclosure.test.mjsruns5,449 bytes
../clawsec-suite/test/skill_catalog_discovery.test.mjsruns7,142 bytes
../clawtributor/.clawhubignoreasset147 bytes
../clawtributor/CHANGELOG.mddoc2,554 bytes
../clawtributor/README.mddoc1,389 bytes
../clawtributor/SKILL.mddoc10,344 bytes
../clawtributor/reporting.mddoc4,548 bytes
../clawtributor/skill.jsonasset1,937 bytes
../hermes-attestation-guardian/CHANGELOG.mddoc4,350 bytes
../hermes-attestation-guardian/README.mddoc2,552 bytes
../hermes-attestation-guardian/SKILL.mddoc10,848 bytes
../hermes-attestation-guardian/lib/attestation.mjsruns16,502 bytes
../hermes-attestation-guardian/lib/cron.mjsruns5,146 bytes
../hermes-attestation-guardian/lib/diff.mjsruns7,725 bytes
../hermes-attestation-guardian/lib/feed.mjsruns27,220 bytes
../hermes-attestation-guardian/lib/semver.mjsruns9,268 bytes
../hermes-attestation-guardian/scripts/check_advisories.mjsruns3,165 bytes
../hermes-attestation-guardian/scripts/generate_attestation.mjsruns4,670 bytes
../hermes-attestation-guardian/scripts/guarded_skill_verify.mjsruns6,531 bytes
../hermes-attestation-guardian/scripts/refresh_advisory_feed.mjsruns3,208 bytes
../hermes-attestation-guardian/scripts/setup_advisory_check_cron.mjsruns5,496 bytes
../hermes-attestation-guardian/scripts/setup_attestation_cron.mjsruns7,002 bytes
../hermes-attestation-guardian/scripts/verify_attestation.mjsruns11,353 bytes
../hermes-attestation-guardian/skill.jsonasset5,261 bytes
../hermes-attestation-guardian/test/attestation_cli.test.mjsruns10,377 bytes
../hermes-attestation-guardian/test/attestation_diff.test.mjsruns2,246 bytes
../hermes-attestation-guardian/test/attestation_schema.test.mjsruns13,105 bytes
../hermes-attestation-guardian/test/feed_verification.test.mjsruns27,282 bytes
../hermes-attestation-guardian/test/guarded_skill_verify.test.mjsruns12,063 bytes
../hermes-attestation-guardian/test/hermes_attestation_sandbox_regression.shruns11,530 bytes
../hermes-attestation-guardian/test/setup_advisory_check_cron.test.mjsruns11,999 bytes
../hermes-attestation-guardian/test/setup_attestation_cron.test.mjsruns9,306 bytes
../hermes-traffic-guardian/CHANGELOG.mddoc1,338 bytes
../hermes-traffic-guardian/README.mddoc921 bytes
../hermes-traffic-guardian/SKILL.mddoc5,411 bytes
../hermes-traffic-guardian/SPEC.mddoc2,738 bytes
../hermes-traffic-guardian/lib/.gitkeepasset1 bytes
../hermes-traffic-guardian/scripts/.gitkeepruns1 bytes
../hermes-traffic-guardian/skill.jsonasset3,494 bytes
../hermes-traffic-guardian/test/.gitkeepasset1 bytes
../nanoclaw-traffic-guardian/CHANGELOG.mddoc1,341 bytes
../nanoclaw-traffic-guardian/README.mddoc954 bytes
../nanoclaw-traffic-guardian/SKILL.mddoc5,371 bytes
../nanoclaw-traffic-guardian/SPEC.mddoc2,424 bytes
../nanoclaw-traffic-guardian/host-services/.gitkeepasset1 bytes
../nanoclaw-traffic-guardian/lib/.gitkeepasset1 bytes
../nanoclaw-traffic-guardian/mcp-tools/.gitkeepasset1 bytes
../nanoclaw-traffic-guardian/skill.jsonasset3,955 bytes
../nanoclaw-traffic-guardian/test/.gitkeepasset1 bytes
../openclaw-audit-watchdog/.clawhubignoreasset214 bytes
../openclaw-audit-watchdog/CHANGELOG.mddoc6,211 bytes
../openclaw-audit-watchdog/README.mddoc8,540 bytes
../openclaw-audit-watchdog/SKILL.mddoc16,514 bytes
../openclaw-audit-watchdog/examples/README.mddoc3,360 bytes
../openclaw-audit-watchdog/examples/security-audit-config.example.jsonasset413 bytes
../openclaw-audit-watchdog/scripts/codex_review.shruns1,038 bytes
../openclaw-audit-watchdog/scripts/load_suppression_config.mjsruns9,094 bytes
../openclaw-audit-watchdog/scripts/render_report.mjsruns8,295 bytes
../openclaw-audit-watchdog/scripts/run_audit_and_format.shruns2,872 bytes
../openclaw-audit-watchdog/scripts/runner.shruns2,210 bytes
../openclaw-audit-watchdog/scripts/send_smtp.mjsruns4,043 bytes
../openclaw-audit-watchdog/scripts/sendmail_report.shruns1,414 bytes
../openclaw-audit-watchdog/scripts/setup_cron.mjsruns11,250 bytes
../openclaw-audit-watchdog/skill.jsonasset3,670 bytes
../openclaw-audit-watchdog/skill.jsonasset3,670 bytes
../openclaw-audit-watchdog/test/E2E-TEST-RESULTS.mddoc5,379 bytes
../openclaw-audit-watchdog/test/empty-suppressions.jsonasset25 bytes
../openclaw-audit-watchdog/test/invalid-json.jsonasset50 bytes
../openclaw-audit-watchdog/test/malformed-config.jsonasset99 bytes
../openclaw-audit-watchdog/test/render_report_suppression.test.mjsruns24,306 bytes
../openclaw-audit-watchdog/test/setup_cron.test.mjsruns5,158 bytes
../openclaw-audit-watchdog/test/suppression_config.test.mjsruns22,684 bytes
../openclaw-audit-watchdog/test/suppression_config_fuzz.test.mjsruns2,811 bytes
../openclaw-traffic-guardian/CHANGELOG.mddoc1,818 bytes
../openclaw-traffic-guardian/README.mddoc988 bytes
../openclaw-traffic-guardian/SKILL.mddoc6,086 bytes
../openclaw-traffic-guardian/SPEC.mddoc3,785 bytes
../openclaw-traffic-guardian/hooks/openclaw-traffic-guardian-hook/.gitkeepasset1 bytes
../openclaw-traffic-guardian/lib/.gitkeepasset1 bytes
../openclaw-traffic-guardian/scripts/.gitkeepruns1 bytes
../openclaw-traffic-guardian/skill.jsonasset3,959 bytes
../openclaw-traffic-guardian/test/.gitkeepasset1 bytes
../picoclaw-security-guardian/CHANGELOG.mddoc1,688 bytes
../picoclaw-security-guardian/README.mddoc2,427 bytes
../picoclaw-security-guardian/SKILL.mddoc7,951 bytes
../picoclaw-security-guardian/lib/advisories.mjsruns1,398 bytes
../picoclaw-security-guardian/lib/drift.mjsruns5,221 bytes
../picoclaw-security-guardian/lib/profile.mjsruns9,728 bytes
../picoclaw-security-guardian/lib/supply_chain.mjsruns4,026 bytes
../picoclaw-security-guardian/scripts/check_advisories.mjsruns599 bytes
../picoclaw-security-guardian/scripts/check_drift.mjsruns872 bytes
../picoclaw-security-guardian/scripts/generate_profile.mjsruns2,125 bytes
../picoclaw-security-guardian/scripts/verify_supply_chain.mjsruns1,058 bytes
../picoclaw-security-guardian/skill.jsonasset4,053 bytes
../picoclaw-security-guardian/test/advisories.test.mjsruns1,713 bytes
../picoclaw-security-guardian/test/drift.test.mjsruns1,034 bytes
../picoclaw-security-guardian/test/picoclaw_security_guardian_sandbox_regression.shruns14,320 bytes
../picoclaw-security-guardian/test/profile.test.mjsruns922 bytes
../picoclaw-security-guardian/test/supply_chain.test.mjsruns1,494 bytes
../picoclaw-self-pen-testing/CHANGELOG.mddoc1,173 bytes
../picoclaw-self-pen-testing/README.mddoc647 bytes
../picoclaw-self-pen-testing/SKILL.mddoc4,119 bytes
../picoclaw-self-pen-testing/lib/format.mjsruns364 bytes
../picoclaw-self-pen-testing/lib/self_pen_test.mjsruns2,750 bytes
../picoclaw-self-pen-testing/scripts/self_pen_test.mjsruns458 bytes
../picoclaw-self-pen-testing/skill.jsonasset2,331 bytes
../picoclaw-self-pen-testing/test/self_pen_test.test.mjsruns642 bytes
../picoclaw-traffic-guardian/CHANGELOG.mddoc1,340 bytes
../picoclaw-traffic-guardian/README.mddoc950 bytes
../picoclaw-traffic-guardian/SKILL.mddoc5,460 bytes
../picoclaw-traffic-guardian/SPEC.mddoc2,829 bytes
../picoclaw-traffic-guardian/lib/.gitkeepasset1 bytes
../picoclaw-traffic-guardian/scripts/.gitkeepruns1 bytes
../picoclaw-traffic-guardian/skill.jsonasset3,562 bytes
../picoclaw-traffic-guardian/test/.gitkeepasset1 bytes
../soul-guardian/.clawhubignoreasset147 bytes
../soul-guardian/CHANGELOG.mddoc3,360 bytes
../soul-guardian/README.mddoc8,693 bytes
../soul-guardian/SKILL.mddoc7,711 bytes
../soul-guardian/scripts/install_launchd_plist.pyruns9,936 bytes
../soul-guardian/scripts/onboard_state_dir.pyruns5,504 bytes
../soul-guardian/scripts/soul_guardian.pyruns35,205 bytes
../soul-guardian/scripts/test_install_launchd_plist.pyruns9,459 bytes
../soul-guardian/scripts/test_soul_guardian.pyruns4,030 bytes
../soul-guardian/skill.jsonasset2,363 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

clawsec-nanoclaw

When your agent uses it

Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot

What it loads into context

Frontmatter

47 tokens

Always available to the agent

SKILL.md

2,257 tokens

When the skill is activated

Reference documents

11,654 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Vercel Skills Installation
Overview
When to Use
MCP Tools Available
Quick Reference
Common Patterns
Common Mistakes
Implementation Details
Real-World Impact
Release Artifact Verification

Scripts executed separately

guardian/integrity-monitor.ts
host-services/advisory-cache.ts
host-services/integrity-handler.ts
host-services/ipc-handlers.ts
host-services/skill-signature-handler.ts
lib/advisories.ts
lib/local_file_io.ts
lib/risk.ts
lib/signatures.ts
lib/types.ts
mcp-tools/advisory-tools.ts
mcp-tools/integrity-tools.ts
mcp-tools/signature-verification.ts
test/security-hardening.test.mjs

Files

CHANGELOG.mddoc3,617 bytes
INSTALL.mddoc9,616 bytes
README.mddoc5,416 bytes
SKILL.mdcore8,507 bytes
SKILL.mdcore8,507 bytes
SKILL.mdcore8,507 bytes
advisories/feed-signing-public.pemasset113 bytes
docs/INTEGRITY.mddoc13,850 bytes
docs/SKILL_SIGNING.mddoc14,939 bytes
guardian/integrity-monitor.tsruns21,442 bytes
guardian/policy.jsonasset1,745 bytes
host-services/advisory-cache.tsruns11,102 bytes
host-services/integrity-handler.tsruns10,995 bytes
host-services/ipc-handlers.tsruns3,378 bytes
host-services/skill-signature-handler.tsruns7,632 bytes
lib/advisories.tsruns14,982 bytes
lib/local_file_io.tsruns316 bytes
lib/risk.tsruns2,501 bytes
lib/signatures.tsruns14,129 bytes
lib/types.tsruns6,059 bytes
mcp-tools/advisory-tools.tsruns13,249 bytes
mcp-tools/integrity-tools.tsruns8,318 bytes
mcp-tools/signature-verification.tsruns7,025 bytes
skill.jsonasset4,949 bytes
test/security-hardening.test.mjsruns7,060 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

clawsec-scanner

When your agent uses it

Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.

What it loads into context

Frontmatter

124 tokens

Always available to the agent

SKILL.md

4,140 tokens

When the skill is activated

Reference documents

1,487 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Vercel Skills Installation
Features
Installation
Usage
Architecture
Troubleshooting
Development
Integration with ClawSec Suite
Security Considerations
Roadmap
Contributing
License
Resources

Scripts executed separately

hooks/clawsec-scanner-hook/handler.ts
lib/report.mjs
lib/types.ts
lib/utils.mjs
scripts/.gitkeep
scripts/dast_hook_executor.mjs
scripts/dast_runner.mjs
scripts/query_cve_databases.mjs
scripts/runner.sh
scripts/sast_analyzer.mjs
scripts/scan_dependencies.mjs
scripts/setup_scanner_hook.mjs
test/cve_integration.test.mjs
test/dast_harness.test.mjs
test/dependency_scanner.test.mjs
test/lib/test_harness.mjs
test/reviewer_regressions.test.mjs
test/sast_engine.test.mjs
../../utils/validate_skill.py

Files

CHANGELOG.mddoc2,189 bytes
README.mddoc451 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
SKILL.mdcore16,498 bytes
hooks/.gitkeepasset0 bytes
hooks/clawsec-scanner-hook/HOOK.mddoc3,676 bytes
hooks/clawsec-scanner-hook/handler.tsruns9,535 bytes
lib/.gitkeepasset0 bytes
lib/report.mjsruns8,204 bytes
lib/types.tsruns923 bytes
lib/utils.mjsruns3,568 bytes
scripts/.gitkeepruns0 bytes
scripts/dast_hook_executor.mjsruns3,809 bytes
scripts/dast_runner.mjsruns15,455 bytes
scripts/query_cve_databases.mjsruns8,892 bytes
scripts/runner.shruns9,574 bytes
scripts/sast_analyzer.mjsruns8,621 bytes
scripts/scan_dependencies.mjsruns10,147 bytes
scripts/setup_scanner_hook.mjsruns3,770 bytes
skill.jsonasset3,662 bytes
test/.gitkeepasset0 bytes
test/cve_integration.test.mjsruns18,916 bytes
test/dast_harness.test.mjsruns10,309 bytes
test/dependency_scanner.test.mjsruns18,770 bytes
test/lib/test_harness.mjsruns2,426 bytes
test/reviewer_regressions.test.mjsruns7,614 bytes
test/sast_engine.test.mjsruns17,894 bytes
../../utils/validate_skill.pyruns4,699 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

clawsec-suite

When your agent uses it

ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.

What it loads into context

Frontmatter

99 tokens

Always available to the agent

SKILL.md

4,376 tokens

When the skill is activated

Reference documents

9,735 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Vercel Skills Installation
Operational Notes
Included vs Optional Protections
Installation
OpenClaw Automation (Hook + Optional Cron)
Guarded Skill Install Flow (Double Confirmation)
Embedded Advisory Feed Behavior
Exploitability Context
Heartbeat Integration
Approval-Gated Response Contract
Advisory Suppression / Allowlist
Optional Skill Installation
Security Notes

Scripts executed separately

hooks/clawsec-advisory-guardian/handler.ts
hooks/clawsec-advisory-guardian/lib/advisory_scope.mjs
hooks/clawsec-advisory-guardian/lib/feed.mjs
hooks/clawsec-advisory-guardian/lib/local_file_io.mjs
hooks/clawsec-advisory-guardian/lib/matching.ts
hooks/clawsec-advisory-guardian/lib/state.ts
hooks/clawsec-advisory-guardian/lib/suppression.mjs
hooks/clawsec-advisory-guardian/lib/types.ts
hooks/clawsec-advisory-guardian/lib/utils.mjs
hooks/clawsec-advisory-guardian/lib/version.mjs
scripts/discover_skill_catalog.mjs
scripts/generate_checksums_json.mjs
scripts/guarded_skill_install.mjs
scripts/local_file_io.mjs
scripts/setup_advisory_cron.mjs
scripts/setup_advisory_hook.mjs
scripts/sign_detached_ed25519.mjs
scripts/verify_detached_ed25519.mjs
test/advisory_application_scope.test.mjs
test/advisory_suppression.test.mjs
test/feed_verification.test.mjs
test/fuzz_properties.js
test/fuzz_properties.test.mjs
test/fuzz_semver_scope_suppression.test.mjs
test/guarded_install.test.mjs
test/heartbeat_version_check.test.mjs
test/lib/test_harness.mjs
test/path_resolution.test.mjs
test/setup_disclosure.test.mjs
test/skill_catalog_discovery.test.mjs

Files

.clawhubignoreasset214 bytes
CHANGELOG.mddoc13,938 bytes
HEARTBEAT.mddoc8,112 bytes
README.mddoc381 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
SKILL.mdcore16,910 bytes
advisories/feed-signing-public.pemasset113 bytes
advisories/feed.jsonasset1,622,753 bytes
advisories/feed.json.sigasset88 bytes
hooks/clawsec-advisory-guardian/HOOK.mddoc2,072 bytes
hooks/clawsec-advisory-guardian/handler.tsruns8,809 bytes
hooks/clawsec-advisory-guardian/lib/advisory_scope.mjsruns1,197 bytes
hooks/clawsec-advisory-guardian/lib/feed.mjsruns17,534 bytes
hooks/clawsec-advisory-guardian/lib/local_file_io.mjsruns131 bytes
hooks/clawsec-advisory-guardian/lib/matching.tsruns6,261 bytes
hooks/clawsec-advisory-guardian/lib/state.tsruns2,475 bytes
hooks/clawsec-advisory-guardian/lib/suppression.mjsruns5,483 bytes
hooks/clawsec-advisory-guardian/lib/types.tsruns1,087 bytes
hooks/clawsec-advisory-guardian/lib/utils.mjsruns3,656 bytes
hooks/clawsec-advisory-guardian/lib/version.mjsruns7,386 bytes
scripts/discover_skill_catalog.mjsruns8,634 bytes
scripts/generate_checksums_json.mjsruns2,176 bytes
scripts/guarded_skill_install.mjsruns9,878 bytes
scripts/local_file_io.mjsruns131 bytes
scripts/setup_advisory_cron.mjsruns3,465 bytes
scripts/setup_advisory_hook.mjsruns3,066 bytes
scripts/sign_detached_ed25519.mjsruns1,689 bytes
scripts/verify_detached_ed25519.mjsruns1,847 bytes
skill.jsonasset9,714 bytes
test/advisory_application_scope.test.mjsruns2,705 bytes
test/advisory_suppression.test.mjsruns12,971 bytes
test/feed_verification.test.mjsruns20,496 bytes
test/fuzz_properties.jsruns2,004 bytes
test/fuzz_properties.test.mjsruns529 bytes
test/fuzz_semver_scope_suppression.test.mjsruns5,417 bytes
test/guarded_install.test.mjsruns13,849 bytes
test/heartbeat_version_check.test.mjsruns6,876 bytes
test/lib/.gitkeepasset0 bytes
test/lib/test_harness.mjsruns4,722 bytes
test/path_resolution.test.mjsruns4,714 bytes
test/setup_disclosure.test.mjsruns5,449 bytes
test/skill_catalog_discovery.test.mjsruns7,142 bytes
../../wiki/exploitability-scoring.mddoc14,875 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

hermes-attestation-guardian

When your agent uses it

Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.

What it loads into context

Frontmatter

67 tokens

Always available to the agent

SKILL.md

2,765 tokens

When the skill is activated

Reference documents

1,518 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Vercel Skills Installation
Release Artifact Verification
Goal
Hermes guard trust policy note
Commands
Attestation payload (implemented)
Fail-closed behavior
Side effects
Advisory feed override knobs
Notes

Scripts executed separately

lib/attestation.mjs
lib/cron.mjs
lib/diff.mjs
lib/feed.mjs
lib/semver.mjs
scripts/check_advisories.mjs
scripts/generate_attestation.mjs
scripts/guarded_skill_verify.mjs
scripts/refresh_advisory_feed.mjs
scripts/setup_advisory_check_cron.mjs
scripts/setup_attestation_cron.mjs
scripts/verify_attestation.mjs
test/attestation_cli.test.mjs
test/attestation_diff.test.mjs
test/attestation_schema.test.mjs
test/feed_verification.test.mjs
test/guarded_skill_verify.test.mjs
test/hermes_attestation_sandbox_regression.sh
test/setup_advisory_check_cron.test.mjs
test/setup_attestation_cron.test.mjs

Files

CHANGELOG.mddoc4,350 bytes
README.mddoc2,552 bytes
SKILL.mdcore10,848 bytes
SKILL.mdcore10,848 bytes
SKILL.mdcore10,848 bytes
SKILL.mdcore10,848 bytes
SKILL.mdcore10,848 bytes
lib/attestation.mjsruns16,502 bytes
lib/cron.mjsruns5,146 bytes
lib/diff.mjsruns7,725 bytes
lib/feed.mjsruns27,220 bytes
lib/semver.mjsruns9,268 bytes
scripts/check_advisories.mjsruns3,165 bytes
scripts/generate_attestation.mjsruns4,670 bytes
scripts/guarded_skill_verify.mjsruns6,531 bytes
scripts/refresh_advisory_feed.mjsruns3,208 bytes
scripts/setup_advisory_check_cron.mjsruns5,496 bytes
scripts/setup_attestation_cron.mjsruns7,002 bytes
scripts/verify_attestation.mjsruns11,353 bytes
skill.jsonasset5,261 bytes
test/attestation_cli.test.mjsruns10,377 bytes
test/attestation_diff.test.mjsruns2,246 bytes
test/attestation_schema.test.mjsruns13,105 bytes
test/feed_verification.test.mjsruns27,282 bytes
test/guarded_skill_verify.test.mjsruns12,063 bytes
test/hermes_attestation_sandbox_regression.shruns11,530 bytes
test/setup_advisory_check_cron.test.mjsruns11,999 bytes
test/setup_attestation_cron.test.mjsruns9,306 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

openclaw-audit-watchdog

When your agent uses it

Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.

What it loads into context

Frontmatter

236 tokens

Always available to the agent

SKILL.md

4,054 tokens

When the skill is activated

Reference documents

5,645 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Vercel Skills Installation
Installation Options
Release Artifact Verification
Operational requirements
Goal
Usage Examples
Suppression / Allowlist
Installation flow (interactive)
Create the cron job
Idempotency / updates
Suggested naming
Minimal recommended defaults (do not auto-change config)

Scripts executed separately

scripts/codex_review.sh
scripts/load_suppression_config.mjs
scripts/render_report.mjs
scripts/run_audit_and_format.sh
scripts/runner.sh
scripts/send_smtp.mjs
scripts/sendmail_report.sh
scripts/setup_cron.mjs
test/render_report_suppression.test.mjs
test/setup_cron.test.mjs
test/suppression_config.test.mjs
test/suppression_config_fuzz.test.mjs

Files

.clawhubignoreasset214 bytes
CHANGELOG.mddoc6,211 bytes
README.mddoc8,540 bytes
SKILL.mdcore16,514 bytes
SKILL.mdcore16,514 bytes
SKILL.mdcore16,514 bytes
SKILL.mdcore16,514 bytes
SKILL.mdcore16,514 bytes
SKILL.mdcore16,514 bytes
SKILL.mdcore16,514 bytes
SKILL.mdcore16,514 bytes
examples/README.mddoc3,360 bytes
examples/security-audit-config.example.jsonasset413 bytes
scripts/codex_review.shruns1,038 bytes
scripts/load_suppression_config.mjsruns9,094 bytes
scripts/render_report.mjsruns8,295 bytes
scripts/run_audit_and_format.shruns2,872 bytes
scripts/runner.shruns2,210 bytes
scripts/send_smtp.mjsruns4,043 bytes
scripts/sendmail_report.shruns1,414 bytes
scripts/setup_cron.mjsruns11,250 bytes
skill.jsonasset3,670 bytes
test/E2E-TEST-RESULTS.mddoc5,379 bytes
test/empty-suppressions.jsonasset25 bytes
test/invalid-json.jsonasset50 bytes
test/malformed-config.jsonasset99 bytes
test/render_report_suppression.test.mjsruns24,306 bytes
test/setup_cron.test.mjsruns5,158 bytes
test/suppression_config.test.mjsruns22,684 bytes
test/suppression_config_fuzz.test.mjsruns2,811 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

Skills included

claw-release
clawsec-clawhub-checker
clawsec-feed
clawsec-nanoclaw
clawsec-scanner
clawsec-suite
clawtributor
hermes-attestation-guardian
hermes-traffic-guardian
nanoclaw-traffic-guardian
openclaw-audit-watchdog
openclaw-traffic-guardian
picoclaw-security-guardian
picoclaw-self-pen-testing
picoclaw-traffic-guardian
soul-guardian

Repository facts

License: AGPL-3.0
Created: Feb 5, 2026
Last pushed: Nov 5, 2026
Forks: 112
Open issues: 3
Project activity: Active

Rank over the last 12 weeks

Now #808 · best #538 · down 159 in 30 days

#797 on Nov 1
#801 on Nov 2
#806 on Nov 3
#809 on Nov 4
#807 on Nov 5
#808 since Nov 6

44 earlier periods

#512 on Aug 2
#536 on Aug 6
#514 on Aug 9
#531 on Aug 10
#536 on Aug 14
#538 on Aug 17
#543 on Aug 19
#552 on Aug 21
#555 on Aug 23
#561 on Aug 24
#571 on Aug 25
#560 on Aug 26
#583 on Aug 28
#544 on Aug 30
#582 on Sep 1
#577 on Sep 3
#560 on Sep 4
#583 on Sep 7
#587 on Sep 9
#585 on Sep 12
#598 on Sep 15
#609 on Sep 16
#613 on Sep 18
#628 on Sep 23
#603 on Sep 26
#625 on Sep 27
#630 on Sep 28
#661 on Sep 29
#636 on Oct 5
#649 on Oct 7
#681 on Oct 8
#661 on Oct 9
#668 on Oct 12
#665 on Oct 13
#658 on Oct 17
#652 on Oct 18
#689 on Oct 19
#698 on Oct 20
#685 on Oct 22
#769 on Oct 25
#786 on Oct 28
#789 on Oct 29
#793 on Oct 30
#796 on Oct 31

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 3, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 255 notes

advisories/feed.json:1 Analysis incomplete: file exceeds text byte budget
advisories/feed.json:9609 Analysis incomplete: signal count limit reached
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
advisories/feed.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed

No broad tool permissions
73 dangerous shell commandsin 23 files: skills/clawsec-feed/SKILL.md:105 skills/clawsec-suite/SKILL.md:88 skills/clawsec-nanoclaw/docs/INTEGRITY.md:419 and 20 more
10,927 network referencesin 74 files: skills/clawsec-feed/advisories/feed.json:20 skills/clawsec-suite/advisories/feed.json:20 advisories/feed.json:20 and 71 more
No hidden or obfuscated text
No instruction overrides
252 executable scriptsin 127 files: skills/clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjs:1 skills/clawsec-clawhub-checker/scripts/check_clawhub_reputation.mjs:1 skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs:1 and 124 more
127 references to secretsin 27 files: skills/soul-guardian/scripts/test_install_launchd_plist.py:36 skills/clawsec-feed/advisories/feed.json:95 skills/clawsec-suite/advisories/feed.json:95 and 24 more
No requests to vote in Hot

Show all 11,379 signals by file

`README.md`

Network accessline 5

<p align="center">   <a href="https://clawsec.prompt.security"><strong>Website</strong></a>

Network accessline 6

<a href="https://clawsec.prompt.security"><strong>Website</strong></a>

Network accessline 7

·   <a href="https://clawsec.prompt.security/#/skills"><strong>Skill catalog</strong></a>   ·

Network accessline 8

<a href="https://clawsec.prompt.security/#/skills"><strong>Skill catalog</strong></a>

Network accessline 9

·   <a href="https://clawsec.prompt.security/feed"><strong>Security feed</strong></a>   ·

Network accessline 10

<a href="https://clawsec.prompt.security/feed"><strong>Security feed</strong></a>

Network accessline 12

<a href="./wiki/INDEX.md"><strong>Documentation</strong></a>   ·   <a href="https://github.com/prompt-security/clawsec/releases"><strong>Releases</strong></a>

Network accessline 13

·   <a href="https://github.com/prompt-security/clawsec/releases"><strong>Releases</strong></a> </p>

Network accessline 14

<a href="https://github.com/prompt-security/clawsec/releases"><strong>Releases</strong></a>

Network accessline 17

<p align="center">   <a href="https://github.com/prompt-security/clawsec/actions/workflows/ci.yml"><img src="https://github.com/prompt-security/clawsec/actions/workflows/ci.yml/badge.svg" alt="CI status"></a>

Network accessline 18

<a href="https://github.com/prompt-security/clawsec/actions/workflows/ci.yml"><img src="https://github.com/prompt-security/clawsec/actions/workflows/ci.yml/badge.svg" alt="CI status"></a>

Network accessline 19

<a href="https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml"><img src="https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml/badge.svg" alt="Pages deployment status"></a>

Network accessline 20

<a href="https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml"><img src="https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml/badge.svg" alt="NVD polling status"></a>

Network accessline 121

Browse every package in the **[live skill catalog](https://clawsec.prompt.security/#/skills)** or the repository’s **[`skills/` directory](skills/)**.

Network accessline 136

curl -fsSL https://clawsec.prompt.security/advisories/feed.json \

`advisories/feed.json`

Network accessline 20

"published": "2026-10-14T21:17:36.433",       "references": [         "https://github.com/nedlir/skills-scanner-bypass",

Network accessline 21

"references": [         "https://github.com/nedlir/skills-scanner-bypass",         "https://github.com/openclaw/clawscan/",

Network accessline 22

"https://github.com/nedlir/skills-scanner-bypass",

Network accessline 23

"https://github.com/openclaw/clawscan/",

Network accessline 24

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa"

Network accessline 25

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 26

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",       "exploitability_score": "medium",

Network accessline 27

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 50

"nvd_category_id": "CWE-59",       "title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's

Network accessline 51

"title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused th

Network accessline 52

"description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused that result for every file in the message. The agent's container can write to its own session folder and

Network accessline 62

"updated": "2026-10-13T17:35:58Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 63

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"       ],

Network accessline 64

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 66

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 67

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",       "nvd_url": null,

Network accessline 68

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 93

"nvd_category_id": "CWE-22",       "title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given.

Network accessline 94

"title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given. A value that pointed outside the g

Network accessline 95
```
[Credential-related source omitted]
```
Access to secretsline 95
```
[Credential-related source omitted]
```

Network accessline 105

"updated": "2026-10-13T17:34:07Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 106

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"       ],

Network accessline 107

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 109

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 110

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",       "nvd_url": null,

Network accessline 111

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 135

"nvd_category_id": "CWE-436",       "title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent in

Network accessline 136

"title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it use

Network accessline 137

"description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it uses ncl. The check that enforces this read the arguments as the agent sent them. The command itself r

Network accessline 149

"updated": "2026-10-13T17:33:48Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 150

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"       ],

Network accessline 151

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 153

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 154

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",       "nvd_url": null,

Network accessline 155

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 180

"nvd_category_id": "CWE-436",       "title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the ag

Network accessline 181

"title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's

Network accessline 182

"description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's first word exactly, but the agent's container matched /clear and /upload-trace by how the word s

Network accessline 194

"updated": "2026-10-13T17:33:25Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 195

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"       ],

Network accessline 196

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 198

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 199

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",       "nvd_url": null,

Network accessline 200

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 225

"nvd_category_id": "CWE-78",       "title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker

Network accessline 226

"title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP serve

Network accessline 227

"description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP server with an attacker on the network path. Installs that use a trusted server over HTTPS, or their own serve

Network accessline 239

"updated": "2026-10-13T17:32:59Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 240

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"       ],

Network accessline 241

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 243

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 244

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",       "nvd_url": null,

Network accessline 245

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 269

"nvd_category_id": "CWE-494",       "title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://.

Network accessline 270

"title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP,

Network accessline 271

"description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP, and setup ran the script in a shell as the user running setup. Someone who could in

Network accessline 283

"updated": "2026-10-13T17:32:37Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 284

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"       ],

Network accessline 285

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 287

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 288

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",       "nvd_url": null,

Network accessline 289

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 313

"nvd_category_id": "CWE-22",       "title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the tas

Network accessline 314

"title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the

Network accessline 315

"description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the character check that the functions for adding to and deleting the same log already applied. A s

Network accessline 327

"updated": "2026-10-13T17:30:15Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 328

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"       ],

Network accessline 329

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 331

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 332

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",       "nvd_url": null,

Network accessline 333

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 357

"nvd_category_id": "CWE-59",       "title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's in

Network accessline 358

"title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the fi

Network accessline 359

"description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the files in a separate step. The agent's container can write to its own session folder and runs at the same time

Network accessline 369

"updated": "2026-10-13T17:23:42Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 370

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"       ],

Network accessline 371

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 373

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 374

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",       "nvd_url": null,

Network accessline 375

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 400

"nvd_category_id": "CWE-59",       "title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its contain

Network accessline 401

"title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code tha

Network accessline 402

"description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code that worked inside those folders followed directory names that the agent could replace with

Network accessline 412

"updated": "2026-10-13T17:19:18Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 413

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"       ],

Network accessline 414

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 416

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 417

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",       "nvd_url": null,

Network accessline 418

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 448

"published": "2026-10-11T13:17:20.840",       "references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 449

"references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c

Network accessline 450

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 451

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/server.ts#L149",

Network accessline 452

"https://hackmd.io/@haind/nexting-pinclaw-send-unauth-agent-injection"

Network accessline 453

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 454

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",       "exploitability_score": "high",

Network accessline 455

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 489

"published": "2026-10-09T17:16:46.540",       "references": [         "https://github.com/netease-youdao/LobsterAI",

Network accessline 490

"references": [         "https://github.com/netease-youdao/LobsterAI",         "https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 491

"https://github.com/netease-youdao/LobsterAI",

Network accessline 492

"https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 493

"https://github.com/netease-youdao/LobsterAI/commit/82fdfe10d1b85d0ff734aa720e18c866b4be2406"

Network accessline 494

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 495

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",       "exploitability_score": "high",

Network accessline 496

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 524

"published": "2026-09-30T20:17:20.663",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 525

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",         "https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a

Network accessline 526

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 527

"https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a38f6",

Network accessline 528

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 529

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 530

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",       "exploitability_score": "high",

Network accessline 531

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 559

"published": "2026-09-30T20:17:20.197",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 560

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.T

Network accessline 561

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 562

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1244-L1270",

Network accessline 563

"https://github.com/openclaw/openclaw-windows-node/commit/16528aadaa45d7bc6718b07ccf8b01f3eb033ad1"

Network accessline 564

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",

Network accessline 565

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",

Network accessline 566

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 594

"published": "2026-09-30T20:17:19.790",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 595

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",         "https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228

Network accessline 596

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 597

"https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228c0b07093173a043a656",

Network accessline 598

"https://github.com/openclaw/openclaw-windows-node/commit/988df5badc84ab5efd5b4e291766a1fa5e7e268a"

Network accessline 599

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 600

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",       "exploitability_score": "high",

Network accessline 601

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 629

"published": "2026-09-30T20:17:19.330",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 630

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",         "https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746b

Network accessline 631

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 632

"https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746ba7d31512a",

Network accessline 633

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 634

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 635

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",       "exploitability_score": "high",

Network accessline 636

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 664

"published": "2026-09-30T20:17:18.857",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 665

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",         "https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604

Network accessline 666

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 667

"https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e",

Network accessline 668

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 669

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 670

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",       "exploitability_score": "high",

Network accessline 671

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 699

"published": "2026-09-30T20:17:18.373",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 700

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",         "https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2

Network accessline 701

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 702

"https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2811e9d550caed9a49b4b",

Network accessline 703

"https://github.com/openclaw/openclaw-windows-node/commit/31a8c6557df740232898079b21f0eb677a4119cf"

Network accessline 704

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 705

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",       "exploitability_score": "medium",

Network accessline 706

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 734

"published": "2026-09-29T18:17:13.893",       "references": [         "https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 735

"references": [         "https://docs.openclaw.ai/releases/2026.9.4",         "https://github.com/openclaw/openclaw",

Network accessline 736

"https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 737
```
"https://github.com/openclaw/openclaw",
```

Network accessline 738

"https://github.com/openclaw/openclaw/blob/1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7/src/gateway/mcp-app-standalone.ts#L209-L215"

Network accessline 739

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 740

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",       "exploitability_score": "medium",

Network accessline 741

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 769

"published": "2026-09-29T18:17:13.730",       "references": [         "https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 770

"references": [         "https://docs.openclaw.ai/releases/2026.9.5",         "https://github.com/openclaw/openclaw",

Network accessline 771

"https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 772
```
"https://github.com/openclaw/openclaw",
```

Network accessline 773

"https://github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-understanding/runner.attachments.ts#L40-L50"

Network accessline 774

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 775

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",       "exploitability_score": "medium",

Network accessline 776

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 804

"published": "2026-09-26T14:16:40.473",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 805

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 806

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 807

"https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 808

"https://www.vulncheck.com/advisories/clawhub-authentication-bypass-via-former-publisher-skill-control"

Network accessline 809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",       "exploitability_score": "medium",

Network accessline 811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 839

"published": "2026-09-26T14:16:40.330",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 840

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 841

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 842

"https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 843

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-skill-hiding-via-coordinated-reports"

Network accessline 844

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 845

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",       "exploitability_score": "medium",

Network accessline 846

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 874

"published": "2026-09-26T14:16:40.187",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 875

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 876

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 877

"https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 878

"https://www.vulncheck.com/advisories/clawhub-changelog-preview-information-disclosure-via-authorization-bypass"

Network accessline 879

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 880

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",       "exploitability_score": "high",

Network accessline 881

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 909

"published": "2026-09-26T14:16:40.040",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 910

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 911

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 912

"https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 913

"https://www.vulncheck.com/advisories/clawhub-ssrf-via-unchecked-dns-resolution-in-profile-image"

Network accessline 914

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",

Network accessline 915

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",

Network accessline 916

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.3); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 944

"published": "2026-09-26T14:16:39.420",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 945

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 946

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 947

"https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 948

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-quota-exhaustion-via-anonymous-api"

Network accessline 949

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 950

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",       "exploitability_score": "high",

Network accessline 951

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 979

"published": "2026-09-26T03:17:08.667",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 980

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",         "https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 981

"https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 982

"https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 983

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 984

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",       "exploitability_score": "high",

Network accessline 985

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 1013

"published": "2026-09-26T03:17:08.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1016

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1017

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1018

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",       "exploitability_score": "high",

Network accessline 1019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1047

"published": "2026-09-26T03:17:08.337",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1048

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1049

"https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1050

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1051

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1052

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",       "exploitability_score": "medium",

Network accessline 1053

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1081

"published": "2026-09-26T03:17:08.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1082

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1083

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1084

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1085

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1086

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",       "exploitability_score": "high",

Network accessline 1087

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1115

"published": "2026-09-26T03:17:08.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1116

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1117

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1118

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1119

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1120

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",       "exploitability_score": "medium",

Network accessline 1121

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1149

"published": "2026-09-26T03:17:07.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1150

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1151

"https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1152

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1153

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1154

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",       "exploitability_score": "medium",

Network accessline 1155

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1183

"published": "2026-09-26T03:17:07.703",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1184

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1185

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1186

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1187

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1188

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",       "exploitability_score": "high",

Network accessline 1189

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1217

"published": "2026-09-26T03:17:07.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1218

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1219

"https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1220

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1221

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1222

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",       "exploitability_score": "medium",

Network accessline 1223

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1251

"published": "2026-09-26T03:17:07.403",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1252

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1253

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1254

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1255

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1256

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",       "exploitability_score": "medium",

Network accessline 1257

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1285

"published": "2026-09-26T03:17:07.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1286

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1287

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1288

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1289

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1290

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",       "exploitability_score": "medium",

Network accessline 1291

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1319

"published": "2026-09-26T03:17:07.110",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1320

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1321

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1322

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1323

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1324

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",       "exploitability_score": "high",

Network accessline 1325

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1353

"published": "2026-09-26T03:17:06.963",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1354

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1355

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1356

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1357

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1358

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",       "exploitability_score": "high",

Network accessline 1359

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1387

"published": "2026-09-26T03:17:06.810",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1388

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1389

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1390

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1391

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1392

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",       "exploitability_score": "high",

Network accessline 1393

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1421

"published": "2026-09-26T03:17:06.660",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1422

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",         "https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1423

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1424

"https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1425

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1426

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",       "exploitability_score": "high",

Network accessline 1427

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1455

"published": "2026-09-26T03:17:06.517",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1456

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1457

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1458

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1459

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1460

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",       "exploitability_score": "high",

Network accessline 1461

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1489

"published": "2026-09-26T03:17:06.373",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1490

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1491

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1492

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1493

],       "cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1494

"cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",       "exploitability_score": "high",

Network accessline 1495

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1523

"published": "2026-09-26T03:17:06.223",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",         "https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1526

"https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1527

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1528

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",       "exploitability_score": "medium",

Network accessline 1529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1557

"published": "2026-09-26T03:17:06.080",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1558

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",         "https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1559

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1560

"https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1561

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Network accessline 1562

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",       "exploitability_score": "high",

Network accessline 1563

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Access to secretsline 1583
```
[Credential-related source omitted]
```

Network accessline 1591

"published": "2026-09-26T03:17:05.930",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1592

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",         "https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1593

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1594

"https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1595

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1596

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",       "exploitability_score": "medium",

Network accessline 1597

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1625

"published": "2026-09-26T03:17:05.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1626

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1627

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1628

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1629

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1630

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",       "exploitability_score": "high",

Network accessline 1631

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1659

"published": "2026-09-26T03:17:05.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1660

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1661

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1662

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1663

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1664

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",       "exploitability_score": "high",

Network accessline 1665

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1693

"published": "2026-09-26T03:17:05.483",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1694

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1695

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1696

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1697

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1698

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",       "exploitability_score": "high",

Network accessline 1699

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1727

"published": "2026-09-26T03:17:05.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1728

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1729

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1730

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1731

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",

Network accessline 1732

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",

Network accessline 1733

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 1761

"published": "2026-09-26T03:17:05.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1762

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1763

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1764

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1765

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",

Network accessline 1766

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",

Network accessline 1767

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 1795

"published": "2026-09-26T03:17:05.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1796

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",         "https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1797

"https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1798

"https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1799

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1800

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",       "exploitability_score": "high",

Network accessline 1801

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1829

"published": "2026-09-26T03:17:04.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1830

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1831

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1832

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1833

],       "cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",

Network accessline 1834

"cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",

Network accessline 1835

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.9); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 1863

"published": "2026-09-26T03:17:04.743",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1864

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1865

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1866

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1867

],       "cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1868

"cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",       "exploitability_score": "low",

Network accessline 1869

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1897

"published": "2026-09-26T03:17:04.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1898

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1899

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1900

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1901

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1902

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",       "exploitability_score": "high",

Network accessline 1903

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1931

"published": "2026-09-26T03:17:04.330",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1932

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1933

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1934

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1935

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Network accessline 1936

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",       "exploitability_score": "high",

Network accessline 1937

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Access to secretsline 1957
```
[Credential-related source omitted]
```

Network accessline 1965

"published": "2026-09-26T03:17:04.177",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1966

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1967

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1968

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1969

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1970

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",       "exploitability_score": "medium",

Network accessline 1971

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1999

"published": "2026-09-26T03:17:04.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2002

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2003

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2004

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",       "exploitability_score": "high",

Network accessline 2005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2033

"published": "2026-09-26T03:17:03.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2034

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2035

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2036

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2037

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2038

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",       "exploitability_score": "high",

Network accessline 2039

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2067

"published": "2026-09-26T03:17:03.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2068

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2069

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2070

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2071

],       "cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",

Network accessline 2072

"cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",

Network accessline 2073

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.2); network accessible; SSRF affects agents making external requests",

Network accessline 2101

"published": "2026-09-26T03:17:03.593",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2102

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",         "https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2103

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2104

"https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2105

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2106

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",       "exploitability_score": "high",

Network accessline 2107

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2135

"published": "2026-09-26T03:17:03.447",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2136

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2137

"https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2138

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2139

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2140

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",       "exploitability_score": "medium",

Network accessline 2141

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2169

"published": "2026-09-26T03:17:03.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2170

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2171

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2172

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2173

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2174

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",       "exploitability_score": "medium",

Network accessline 2175

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2203

"published": "2026-09-26T03:17:03.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2204

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2205

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2206

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2207

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2208

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",       "exploitability_score": "medium",

Network accessline 2209

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2237

"published": "2026-09-26T03:17:02.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2238

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2239

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2240

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2241

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2242

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",       "exploitability_score": "high",

Network accessline 2243

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2271

"published": "2026-09-26T03:17:02.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2272

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2273

"https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2274

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2275

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2276

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",       "exploitability_score": "high",

Network accessline 2277

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2305

"published": "2026-09-26T03:17:02.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2306

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2307

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2308

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2309

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2310

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",       "exploitability_score": "high",

Network accessline 2311

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2339

"published": "2026-09-26T03:17:02.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2340

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2341

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2342

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2343

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2344

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",       "exploitability_score": "high",

Network accessline 2345

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2373

"published": "2026-09-26T03:17:02.387",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2374

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2375

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2376

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2377

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2378

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",       "exploitability_score": "high",

Network accessline 2379

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2407

"published": "2026-09-26T03:17:02.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2408

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2409

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2410

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2411

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2412

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",       "exploitability_score": "medium",

Network accessline 2413

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2441

"published": "2026-09-26T03:17:02.087",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2442

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2443

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2444

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2445

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",

Network accessline 2446

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",

Network accessline 2447

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.1); network accessible; SSRF affects agents making external requests",

Network accessline 2475

"published": "2026-09-26T03:17:01.933",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2476

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2477

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2478

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2479

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2480

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",       "exploitability_score": "medium",

Network accessline 2481

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2509

"published": "2026-09-26T03:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",         "https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2512

"https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2513

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2514

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",       "exploitability_score": "medium",

Network accessline 2515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2543

"published": "2026-09-26T03:17:01.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2544

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2545

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2546

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2547

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2548

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",       "exploitability_score": "high",

Network accessline 2549

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2577

"published": "2026-09-26T03:17:01.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2578

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",         "https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2579

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2580

"https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2581

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2582

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",       "exploitability_score": "high",

Network accessline 2583

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2611

"published": "2026-09-26T03:17:01.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2612

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2613

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2614

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2615

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2616

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",       "exploitability_score": "medium",

Network accessline 2617

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2645

"published": "2026-09-26T03:17:01.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2646

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2647

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2648

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2649

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2650

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",       "exploitability_score": "medium",

Network accessline 2651

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2679

"published": "2026-09-26T03:17:01.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2680

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2681

"https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2682

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2683

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2684

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",       "exploitability_score": "medium",

Network accessline 2685

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2713

"published": "2026-09-26T03:17:00.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2714

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2715

"https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2716

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2717

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2718

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",       "exploitability_score": "medium",

Network accessline 2719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2747

"published": "2026-09-26T03:17:00.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2748

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",         "https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2749

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2750

"https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2751

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2752

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",       "exploitability_score": "medium",

Network accessline 2753

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2781

"published": "2026-09-26T03:17:00.590",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2782

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2783

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2784

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2785

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2786

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",       "exploitability_score": "high",

Network accessline 2787

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2815

"published": "2026-09-26T03:17:00.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2816

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",         "https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2817

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2818

"https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2819

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2820

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",       "exploitability_score": "high",

Network accessline 2821

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2849

"published": "2026-09-26T03:17:00.287",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2850

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2851

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2852

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2853

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2854

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",       "exploitability_score": "high",

Network accessline 2855

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2883

"published": "2026-09-26T03:17:00.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2884

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2885

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2886

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2887

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2888

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",       "exploitability_score": "high",

Network accessline 2889

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2917

"published": "2026-09-26T03:16:59.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",         "https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2920

"https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2921

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2922

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",       "exploitability_score": "high",

Network accessline 2923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2951

"published": "2026-09-26T03:16:59.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2952

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",         "https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2953

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2954

"https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2955

],       "cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2956

"cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",       "exploitability_score": "high",

Network accessline 2957

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2985

"published": "2026-09-26T03:16:59.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2986

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2987

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2988

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2989

],       "cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 2990

"cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",       "exploitability_score": "low",

Network accessline 2991

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 3019

"published": "2026-09-26T03:16:59.537",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3020

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3021

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3022

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3023

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3024

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",       "exploitability_score": "medium",

Network accessline 3025

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3053

"published": "2026-09-26T03:16:59.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3054

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3055

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3056

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3057

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3058

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",       "exploitability_score": "low",

Network accessline 3059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3087

"published": "2026-09-26T03:16:59.247",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3088

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3089

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3090

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3091

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3092

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",       "exploitability_score": "high",

Network accessline 3093

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3121

"published": "2026-09-26T03:16:59.103",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3122

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3123

"https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3124

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3125

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3126

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",       "exploitability_score": "high",

Network accessline 3127

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3155

"published": "2026-09-26T03:16:58.957",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3156

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3157

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3158

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3159

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3160

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",       "exploitability_score": "low",

Network accessline 3161

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3189

"published": "2026-09-26T03:16:58.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3190

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3191

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3192

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3193

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3194

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",       "exploitability_score": "medium",

Network accessline 3195

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3223

"published": "2026-09-26T03:16:58.367",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3226

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3227

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3228

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",       "exploitability_score": "high",

Network accessline 3229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3257

"published": "2026-09-26T03:16:58.217",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3258

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3259

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3260

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3261

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3262

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",       "exploitability_score": "medium",

Network accessline 3263

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3291

"published": "2026-09-26T03:16:58.057",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3292

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3293

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3294

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3295

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3296

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",       "exploitability_score": "medium",

Network accessline 3297

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3325

"published": "2026-09-26T03:16:57.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3326

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3327

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3328

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3329

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3330

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",       "exploitability_score": "high",

Network accessline 3331

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3359

"published": "2026-09-26T03:16:57.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3360

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",         "https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3361

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3362

"https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3363

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3364

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",       "exploitability_score": "medium",

Network accessline 3365

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3393

"published": "2026-09-26T03:16:57.563",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3394

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",         "https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3395

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3396

"https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3397

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3398

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",       "exploitability_score": "high",

Network accessline 3399

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3427

"published": "2026-09-22T21:17:34.583",       "references": [         "https://github.com/openclaw/openclaw",

Network accessline 3428

"references": [         "https://github.com/openclaw/openclaw",         "https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3429
```
"https://github.com/openclaw/openclaw",
```

Network accessline 3430

"https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3431

"https://github.com/openclaw/openclaw/commit/8361f3704dd5e151ff1325e62ff5de658b6c62e6"

Network accessline 3432

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3433

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",       "exploitability_score": "medium",

Network accessline 3434

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3462

"published": "2026-09-20T23:17:03.530",       "references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3463

"references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",         "https://vuldb.com/cve/CVE-2026-94094",

Network accessline 3464

"https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3465
```
"https://vuldb.com/cve/CVE-2026-94094",
```
Network accessline 3466
```
"https://vuldb.com/submit/882009"
```

Network accessline 3467

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3468

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",       "exploitability_score": "medium",

Network accessline 3469

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3497

"published": "2026-09-15T15:17:32.800",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3498

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3499

"https://github.com/openclaw/clawscan/",

Network accessline 3500

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3501

"https://github.com/openclaw/clawscan/issues/40"

Network accessline 3502

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3503

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",       "exploitability_score": "low",

Network accessline 3504

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3532

"published": "2026-09-15T15:17:32.567",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3533

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3534

"https://github.com/openclaw/clawscan/",

Network accessline 3535

"https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3536

"https://github.com/openclaw/clawscan/issues/42"

Network accessline 3537

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3538

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",       "exploitability_score": "low",

Network accessline 3539

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3573

"published": "2026-09-14T21:17:41.987",       "references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3574

"references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",         "https://github.com/netease-youdao/LobsterAI/",

Network accessline 3575

"https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3576

"https://github.com/netease-youdao/LobsterAI/",

Network accessline 3577

"https://github.com/netease-youdao/LobsterAI/issues/2181"

Network accessline 3578

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",

Network accessline 3579

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",

Network accessline 3580

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (4.3); network accessible; SSRF affects agents making external requests",

Network accessline 3608

"published": "2026-09-14T18:20:28.530",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 3609

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3610

"https://github.com/nanocoai/nanoclaw/",

Network accessline 3611

"https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3612

"https://github.com/nanocoai/nanoclaw/issues/2828"

Network accessline 3613

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3614

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",       "exploitability_score": "medium",

Network accessline 3615

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3652

"updated": "2026-09-11T00:58:46Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3653

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"       ],

Network accessline 3654

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3656

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3657

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",       "nvd_url": null,

Network accessline 3658

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3695

"updated": "2026-09-11T00:57:53Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3696

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"       ],

Network accessline 3697

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3699

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3700

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",       "nvd_url": null,

Network accessline 3701

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3737

"updated": "2026-09-11T00:57:28Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3738

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"       ],

Network accessline 3739

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3741

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3742

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",       "nvd_url": null,

Network accessline 3743

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3772

"published": "2026-09-03T13:06:21.603",       "references": [         "https://vuldb.com/cve/CVE-2026-85107",

Network accessline 3773

"references": [         "https://vuldb.com/cve/CVE-2026-85107",         "https://vuldb.com/submit/885135",

Network accessline 3774
```
"https://vuldb.com/cve/CVE-2026-85107",
```
Network accessline 3775
```
"https://vuldb.com/submit/885135",
```
Network accessline 3776
```
"https://vuldb.com/vuln/398314"
```

Network accessline 3777

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3778

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",       "exploitability_score": "high",

Network accessline 3779

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3807

"published": "2026-09-03T13:06:21.437",       "references": [         "https://vuldb.com/cve/CVE-2026-85106",

Network accessline 3808

"references": [         "https://vuldb.com/cve/CVE-2026-85106",         "https://vuldb.com/submit/885132",

Network accessline 3809
```
"https://vuldb.com/cve/CVE-2026-85106",
```
Network accessline 3810
```
"https://vuldb.com/submit/885132",
```
Network accessline 3811
```
"https://vuldb.com/vuln/398313"
```

Network accessline 3812

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",

Network accessline 3813

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",

Network accessline 3814

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 3842

"published": "2026-09-03T13:06:21.250",       "references": [         "https://vuldb.com/cve/CVE-2026-85105",

Network accessline 3843

"references": [         "https://vuldb.com/cve/CVE-2026-85105",         "https://vuldb.com/submit/885131",

Network accessline 3844
```
"https://vuldb.com/cve/CVE-2026-85105",
```
Network accessline 3845
```
"https://vuldb.com/submit/885131",
```
Network accessline 3846
```
"https://vuldb.com/vuln/398312"
```

Network accessline 3847

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3848

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",       "exploitability_score": "high",

Network accessline 3849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3877

"published": "2026-09-01T22:17:18.813",       "references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3878

"references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",         "https://vuldb.com/cve/CVE-2026-84289",

Network accessline 3879

"https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3880
```
"https://vuldb.com/cve/CVE-2026-84289",
```
Network accessline 3881
```
"https://vuldb.com/submit/882960"
```

Network accessline 3882

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3883

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",       "exploitability_score": "high",

Network accessline 3884

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3912

"published": "2026-09-01T22:17:18.647",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3913

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84288",

Network accessline 3914

"https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3915
```
"https://vuldb.com/cve/CVE-2026-84288",
```
Network accessline 3916
```
"https://vuldb.com/submit/882873"
```

Network accessline 3917

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3918

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",       "exploitability_score": "medium",

Network accessline 3919

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3947

"published": "2026-09-01T21:18:46.567",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3948

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84287",

Network accessline 3949

"https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3950
```
"https://vuldb.com/cve/CVE-2026-84287",
```
Network accessline 3951
```
"https://vuldb.com/submit/882712"
```

Network accessline 3952

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3953

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",       "exploitability_score": "medium",

Network accessline 3954

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3982

"published": "2026-08-06T08:16:30.087",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 3983

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3984

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 3985

"https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3986

"https://github.com/mf-yang/openclaw-cn/issues/566"

Network accessline 3987

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 3988

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",       "exploitability_score": "medium",

Network accessline 3989

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 4017

"published": "2026-08-06T07:16:29.947",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4018

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4019

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4020

"https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4021
```
"https://vuldb.com/cve/CVE-2026-19007"
```

Network accessline 4022

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4023

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",       "exploitability_score": "medium",

Network accessline 4024

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4052

"published": "2026-08-06T07:16:29.780",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4053

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4054

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4055

"https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4056
```
"https://vuldb.com/cve/CVE-2026-19006"
```

Network accessline 4057

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4058

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",       "exploitability_score": "medium",

Network accessline 4059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4087

"published": "2026-08-06T07:16:29.583",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4088

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4089

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4090

"https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4091
```
"https://vuldb.com/cve/CVE-2026-19005"
```

Network accessline 4092

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4093

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",       "exploitability_score": "medium",

Network accessline 4094

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4122

"published": "2026-08-06T05:16:41.380",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4123

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4124

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4125

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4126

"https://github.com/NousResearch/hermes-agent/issues/48181"

Network accessline 4127

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4128

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",       "exploitability_score": "medium",

Network accessline 4129

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4157

"published": "2026-08-06T03:16:22.130",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4158

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4159

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4160

"https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4161
```
"https://vuldb.com/cve/CVE-2026-18991"
```

Network accessline 4162

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4163

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",       "exploitability_score": "high",

Network accessline 4164

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4192

"published": "2026-08-06T02:16:41.430",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4193

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4194

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4195

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4196

"https://github.com/NousResearch/hermes-agent/pull/46185"

Network accessline 4197

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4198

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",       "exploitability_score": "medium",

Network accessline 4199

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4227

"published": "2026-08-04T17:16:48.287",       "references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4228

"references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",         "https://vuldb.com/cve/CVE-2026-18775",

Network accessline 4229

"https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4230
```
"https://vuldb.com/cve/CVE-2026-18775",
```
Network accessline 4231
```
"https://vuldb.com/submit/856877"
```

Network accessline 4232

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",

Network accessline 4233

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",

Network accessline 4234

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4262

"published": "2026-08-04T17:16:48.127",       "references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4263

"references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",         "https://vuldb.com/cve/CVE-2026-18774",

Network accessline 4264

"https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4265
```
"https://vuldb.com/cve/CVE-2026-18774",
```
Network accessline 4266
```
"https://vuldb.com/submit/856875"
```

Network accessline 4267

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",

Network accessline 4268

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",

Network accessline 4269

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4297

"published": "2026-08-04T16:16:22.470",       "references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4298

"references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",         "https://vuldb.com/cve/CVE-2026-18773",

Network accessline 4299

"https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4300
```
"https://vuldb.com/cve/CVE-2026-18773",
```
Network accessline 4301
```
"https://vuldb.com/submit/856874"
```

Network accessline 4302

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4303

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",       "exploitability_score": "medium",

Network accessline 4304

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4332

"published": "2026-08-03T21:16:39.450",       "references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4333

"references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",         "https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4334

"https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4335

"https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4336

],       "cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4337

"cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",       "exploitability_score": "unknown",

Network accessline 4338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4367

"published": "2026-07-30T23:16:53.687",       "references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4368

"references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4369

"https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4370

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4371

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-lastmessage-session-field"

Network accessline 4372

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4373

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",       "exploitability_score": "high",

Network accessline 4374

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4403

"published": "2026-07-30T21:18:12.490",       "references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4404

"references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4405

"https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4406

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4407

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-failed-login-username-field"

Network accessline 4408

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4409

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",       "exploitability_score": "high",

Network accessline 4410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4438

"published": "2026-07-26T11:16:58.470",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4439

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4440

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4441

"https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4442
```
"https://vuldb.com/cve/CVE-2026-17458"
```

Network accessline 4443

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",

Network accessline 4444

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",

Network accessline 4445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4473

"published": "2026-07-26T10:16:25.163",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4474

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4475

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4476

"https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4477
```
"https://vuldb.com/cve/CVE-2026-17457"
```

Network accessline 4478

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4479

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",       "exploitability_score": "medium",

Network accessline 4480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4508

"published": "2026-07-26T04:16:46.573",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4509

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4510

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4511

"https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4512

"https://github.com/nanocoai/nanoclaw/issues/2762"

Network accessline 4513

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4514

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",       "exploitability_score": "medium",

Network accessline 4515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4543

"published": "2026-07-26T03:16:32.490",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4544

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4545

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4546

"https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4547
```
"https://vuldb.com/cve/CVE-2026-17433"
```

Network accessline 4548

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4549

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",       "exploitability_score": "medium",

Network accessline 4550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4578

"published": "2026-07-26T01:16:25.783",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4579

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4580

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4581

"https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4582

"https://github.com/NousResearch/hermes-agent/issues/44729"

Network accessline 4583

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4584

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",       "exploitability_score": "medium",

Network accessline 4585

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4613

"published": "2026-07-19T00:16:40.650",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4614

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4615
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4616

"https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4617

"https://github.com/sipeed/picoclaw/issues/3080"

Network accessline 4618

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4619

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",       "exploitability_score": "high",

Network accessline 4620

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4648

"published": "2026-07-18T23:17:01.187",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4649

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4650
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4651

"https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4652
```
"https://vuldb.com/cve/CVE-2026-16197"
```

Network accessline 4653

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4654

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",       "exploitability_score": "medium",

Network accessline 4655

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4683

"published": "2026-07-18T23:17:01.010",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4684

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4685
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4686

"https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4687

"https://github.com/sipeed/picoclaw/issues/3077"

Network accessline 4688

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",

Network accessline 4689

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",

Network accessline 4690

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4718

"published": "2026-07-18T23:17:00.847",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4719

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4720
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4721

"https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4722
```
"https://vuldb.com/cve/CVE-2026-16195"
```

Network accessline 4723

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4724

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",       "exploitability_score": "medium",

Network accessline 4725

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4753

"published": "2026-07-18T10:17:25.627",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4754

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4755
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4756

"https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4757
```
"https://vuldb.com/cve/CVE-2026-16085"
```

Network accessline 4758

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4759

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",       "exploitability_score": "medium",

Network accessline 4760

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4788

"published": "2026-07-18T09:17:08.113",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4789

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4790
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4791

"https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4792

"https://github.com/sipeed/picoclaw/issues/3074"

Network accessline 4793

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",

Network accessline 4794

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",

Network accessline 4795

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.3); remotely exploitable without authentication; SSRF affects agents making external r

Network accessline 4823

"published": "2026-07-18T09:17:07.953",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4824

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4825
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4826

"https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4827
```
"https://vuldb.com/cve/CVE-2026-16083"
```

Network accessline 4828

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4829

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",       "exploitability_score": "high",

Network accessline 4830

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4858

"published": "2026-07-18T09:17:07.783",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4859

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4860
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4861

"https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4862
```
"https://vuldb.com/cve/CVE-2026-16082"
```

Network accessline 4863

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4864

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",       "exploitability_score": "medium",

Network accessline 4865

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4893

"published": "2026-07-18T08:16:35.130",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4894

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4895
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4896

"https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4897

"https://github.com/sipeed/picoclaw/issues/3072"

Network accessline 4898

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4899

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",       "exploitability_score": "medium",

Network accessline 4900

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4929

"published": "2026-07-17T02:18:10.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4930

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4931

"https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4932

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4933

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4934

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",       "exploitability_score": "high",

Network accessline 4935

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4964

"published": "2026-07-17T02:18:10.153",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4965

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4966

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4967

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4968

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4969

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",       "exploitability_score": "high",

Network accessline 4970

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4999

"published": "2026-07-17T02:18:10.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",         "https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5002

"https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5003

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",

Network accessline 5004

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",

Network accessline 5005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5034

"published": "2026-07-17T02:18:09.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5035

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5036

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5037

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5038

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",

Network accessline 5039

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",

Network accessline 5040

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 5069

"published": "2026-07-17T02:18:09.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5070

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5071

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5072

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5073

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5074

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",       "exploitability_score": "medium",

Network accessline 5075

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5103

"published": "2026-07-17T02:18:09.603",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",         "https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5106

"https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5107

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5108

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",       "exploitability_score": "medium",

Network accessline 5109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5138

"published": "2026-07-17T02:18:09.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5141

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5142

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5143

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",       "exploitability_score": "high",

Network accessline 5144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5173

"published": "2026-07-17T02:18:09.273",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",         "https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5176

"https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5177

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5178

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",       "exploitability_score": "medium",

Network accessline 5179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5208

"published": "2026-07-17T02:18:09.133",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5211

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5212

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5213

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",       "exploitability_score": "medium",

Network accessline 5214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5243

"published": "2026-07-17T02:18:08.990",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",         "https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5246

"https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5247

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5248

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",       "exploitability_score": "high",

Network accessline 5249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5278

"published": "2026-07-17T02:18:08.847",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5282

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5283

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",       "exploitability_score": "high",

Network accessline 5284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5313

"published": "2026-07-17T02:18:08.693",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5317

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5318

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",       "exploitability_score": "high",

Network accessline 5319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5348

"published": "2026-07-17T02:18:08.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5351

"https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5352

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5353

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",       "exploitability_score": "high",

Network accessline 5354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5383

"published": "2026-07-17T02:18:08.420",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5386

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5387

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",

Network accessline 5388

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",

Network accessline 5389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.0); network accessible; SSRF affects agents making external requests",

Network accessline 5418

"published": "2026-07-17T02:18:08.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5421

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5422

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5423

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",       "exploitability_score": "high",

Network accessline 5424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5453

"published": "2026-07-17T02:18:08.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",         "https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5456

"https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5457

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5458

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",       "exploitability_score": "medium",

Network accessline 5459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5488

"published": "2026-07-17T02:18:07.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",

Network accessline 5489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"       ],

Network accessline 5491

"https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5492

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5493

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",       "exploitability_score": "medium",

Network accessline 5494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5523

"published": "2026-07-17T02:18:07.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5526

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5527

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5528

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",       "exploitability_score": "high",

Network accessline 5529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5558

"published": "2026-07-17T02:18:07.620",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",         "https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5561

"https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5562

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5563

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",       "exploitability_score": "medium",

Network accessline 5564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5593

"published": "2026-07-17T02:18:07.470",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",         "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5596

"https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",       "exploitability_score": "high",

Network accessline 5599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5628

"published": "2026-07-17T02:18:07.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5631

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5632

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5633

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",       "exploitability_score": "high",

Network accessline 5634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5663

"published": "2026-07-17T02:18:07.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",         "https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5666

"https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5667

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5668

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",       "exploitability_score": "medium",

Network accessline 5669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5698

"published": "2026-07-17T02:18:07.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5701

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",       "exploitability_score": "high",

Network accessline 5704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5733

"published": "2026-07-17T02:18:06.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5736

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5737

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5738

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",       "exploitability_score": "high",

Network accessline 5739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5768

"published": "2026-07-17T02:18:06.747",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5771

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5772

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5773

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",       "exploitability_score": "high",

Network accessline 5774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5803

"published": "2026-07-17T02:18:06.587",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",         "https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5806

"https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",       "exploitability_score": "high",

Network accessline 5809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5838

"published": "2026-07-17T02:18:06.430",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5841

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5842

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5843

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",       "exploitability_score": "high",

Network accessline 5844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5873

"published": "2026-07-17T02:18:06.170",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",         "https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5876

"https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5877

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",

Network accessline 5878

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",

Network accessline 5879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5908

"published": "2026-07-13T22:16:51.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5911

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5912

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5913

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",       "exploitability_score": "high",

Network accessline 5914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5943

"published": "2026-07-13T22:16:51.673",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5946

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5947

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5948

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",       "exploitability_score": "high",

Network accessline 5949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5978

"published": "2026-07-13T22:16:51.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5981

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5982

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 5983

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",       "exploitability_score": "medium",

Network accessline 5984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 6013

"published": "2026-07-13T22:16:51.380",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6016

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6017

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",

Network accessline 6018

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",

Network accessline 6019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 6048

"published": "2026-07-13T22:16:51.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6051

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6052

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6053

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",       "exploitability_score": "high",

Network accessline 6054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6083

"published": "2026-07-13T22:16:51.100",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6086

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6087

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6088

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",       "exploitability_score": "high",

Network accessline 6089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6118

"published": "2026-07-13T22:16:50.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6121

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",       "exploitability_score": "high",

Network accessline 6124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6153

"published": "2026-07-13T22:16:50.600",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6156

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6157

],       "cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6158

"cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",       "exploitability_score": "medium",

Network accessline 6159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6188

"published": "2026-07-13T22:16:50.457",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6191

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6192

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6193

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",       "exploitability_score": "high",

Network accessline 6194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6223

"published": "2026-07-13T22:16:50.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6227

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6228

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",       "exploitability_score": "high",

Network accessline 6229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6258

"published": "2026-07-13T22:16:50.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6261

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",       "exploitability_score": "high",

Network accessline 6264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6293

"published": "2026-07-13T22:16:50.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6294

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",         "https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6295

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6296

"https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6297

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6298

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",       "exploitability_score": "high",

Network accessline 6299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6328

"published": "2026-07-13T22:16:49.893",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6329

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",         "https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6330

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6331

"https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6332

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6333

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",       "exploitability_score": "high",

Network accessline 6334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6363

"published": "2026-07-13T22:16:49.753",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6364

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",         "https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6365

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6366

"https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6367

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6368

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",       "exploitability_score": "high",

Network accessline 6369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6398

"published": "2026-07-13T22:16:49.607",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6399

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6400

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6401

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6402

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6403

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",       "exploitability_score": "high",

Network accessline 6404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6432

"published": "2026-07-10T03:16:20.723",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6433

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6434
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6435

"https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6436
```
"https://vuldb.com/cve/CVE-2026-15320"
```

Network accessline 6437

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6438

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",       "exploitability_score": "medium",

Network accessline 6439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6467

"published": "2026-07-10T03:16:20.433",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6468

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6469
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6470

"https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6471

"https://github.com/sipeed/picoclaw/pull/3126"

Network accessline 6472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",       "exploitability_score": "high",

Network accessline 6474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6502

"published": "2026-07-10T02:16:25.457",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6503

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6504
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6505

"https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6506
```
"https://vuldb.com/cve/CVE-2026-15318"
```

Network accessline 6507

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6508

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",       "exploitability_score": "medium",

Network accessline 6509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6537

"published": "2026-07-10T00:16:33.027",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6538

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6539
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6540

"https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6541
```
"https://vuldb.com/cve/CVE-2026-15317"
```

Network accessline 6542

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",

Network accessline 6543

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",

Network accessline 6544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 6572

"published": "2026-07-10T00:16:32.853",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6573

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6574

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6575

"https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6576

"https://github.com/NousResearch/hermes-agent/pull/42759"

Network accessline 6577

],       "cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6578

"cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",       "exploitability_score": "low",

Network accessline 6579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6607

"published": "2026-07-09T17:16:57.947",       "references": [         "https://github.com/AidanPark/openclaw-android/",

Network accessline 6608

"references": [         "https://github.com/AidanPark/openclaw-android/",         "https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6609

"https://github.com/AidanPark/openclaw-android/",

Network accessline 6610

"https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6611

"https://github.com/AidanPark/openclaw-android/pull/137"

Network accessline 6612

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6613

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",       "exploitability_score": "high",

Network accessline 6614

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6643

"published": "2026-07-08T17:17:25.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6644

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",         "https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6645

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6646

"https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6647

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6648

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",       "exploitability_score": "medium",

Network accessline 6649

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6677

"published": "2026-07-06T00:16:55.037",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6678

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6679

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6680

"https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6681

"https://github.com/NousResearch/hermes-agent/issues/38643"

Network accessline 6682

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6683

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",       "exploitability_score": "medium",

Network accessline 6684

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6712

"published": "2026-07-04T13:16:30.413",       "references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6713

"references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",         "https://vuldb.com/cve/CVE-2026-14628",

Network accessline 6714

"https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6715
```
"https://vuldb.com/cve/CVE-2026-14628",
```
Network accessline 6716
```
"https://vuldb.com/submit/845599"
```

Network accessline 6717

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6718

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",       "exploitability_score": "high",

Network accessline 6719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6747

"published": "2026-07-04T13:16:30.230",       "references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6748

"references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",         "https://vuldb.com/cve/CVE-2026-14627",

Network accessline 6749

"https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6750
```
"https://vuldb.com/cve/CVE-2026-14627",
```
Network accessline 6751
```
"https://vuldb.com/submit/845598"
```

Network accessline 6752

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6753

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",       "exploitability_score": "high",

Network accessline 6754

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6782

"published": "2026-07-04T12:16:53.903",       "references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6783

"references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",         "https://vuldb.com/cve/CVE-2026-14626",

Network accessline 6784

"https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6785
```
"https://vuldb.com/cve/CVE-2026-14626",
```
Network accessline 6786
```
"https://vuldb.com/submit/845596"
```

Network accessline 6787

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6788

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",       "exploitability_score": "medium",

Network accessline 6789

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6817

"published": "2026-07-04T12:16:53.740",       "references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6818

"references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",         "https://vuldb.com/cve/CVE-2026-14625",

Network accessline 6819

"https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6820
```
"https://vuldb.com/cve/CVE-2026-14625",
```
Network accessline 6821
```
"https://vuldb.com/submit/845595"
```

Network accessline 6822

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6823

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",       "exploitability_score": "medium",

Network accessline 6824

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6852

"published": "2026-07-03T22:16:52.943",       "references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6853

"references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6854

"https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6855

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6856

"https://github.com/NousResearch/hermes-agent/issues/27288"

Network accessline 6857

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6858

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",       "exploitability_score": "low",

Network accessline 6859

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6896

"updated": "2026-06-30T00:38:59Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6897

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"       ],

Network accessline 6898

"https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6900

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6901

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",       "nvd_url": null,

Network accessline 6902

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6933

"published": "2026-06-23T19:17:11.713",       "references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6934

"references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"       ],

Network accessline 6935

"https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6936

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6937

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",       "exploitability_score": "high",

Network accessline 6938

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6966

"published": "2026-06-23T16:17:06.040",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6967

"references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",         "https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6968

"https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6969

"https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6970

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-forged-channel-approval-callback"

Network accessline 6971

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 6972

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",       "exploitability_score": "medium",

Network accessline 6973

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 7001

"published": "2026-06-23T16:17:05.887",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7002

"references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",         "https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7003

"https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7004

"https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7005

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unauthorized-create-agent-system-action"

Network accessline 7006

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7007

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",       "exploitability_score": "medium",

Network accessline 7008

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7036

"published": "2026-06-23T16:17:05.753",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7037

"references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",         "https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7038

"https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7039

"https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7040

"https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles"

Network accessline 7041

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7042

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",       "exploitability_score": "medium",

Network accessline 7043

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7071

"published": "2026-06-23T16:17:05.397",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7072

"references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",         "https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7073

"https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7074

"https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7075

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unverified-approval-response-handler"

Network accessline 7076

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7077

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",       "exploitability_score": "medium",

Network accessline 7078

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7110

"published": "2026-06-16T19:17:05.023",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7111

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7112

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7113

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7114

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7115

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",       "exploitability_score": "high",

Network accessline 7116

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7147

"published": "2026-06-16T19:17:04.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7148

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7149

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7150

"https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7151

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Network accessline 7152

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",       "exploitability_score": "high",

Network accessline 7153

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Access to secretsline 7173
```
[Credential-related source omitted]
```

Network accessline 7184

"published": "2026-06-16T19:17:04.760",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7185

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",         "https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7186

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7187

"https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7188

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7189

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",       "exploitability_score": "high",

Network accessline 7190

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7222

"published": "2026-06-16T19:17:04.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7223

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",         "https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7224

"https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7225

"https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7226

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7227

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",       "exploitability_score": "high",

Network accessline 7228

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7260

"published": "2026-06-16T19:17:04.160",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7261

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",         "https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7262

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7263

"https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7264

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7265

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",       "exploitability_score": "medium",

Network accessline 7266

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7296

"published": "2026-06-16T19:17:04.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7297

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7298

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7299

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7300

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7301

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",       "exploitability_score": "medium",

Network accessline 7302

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7332

"published": "2026-06-16T19:17:03.573",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7333

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",         "https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7334

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7335

"https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7336

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7337

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",       "exploitability_score": "medium",

Network accessline 7338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7369

"published": "2026-06-16T19:17:03.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7370

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",         "https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7371

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7372

"https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7373

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Network accessline 7374

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",       "exploitability_score": "medium",

Network accessline 7375

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Access to secretsline 7395
```
[Credential-related source omitted]
```

Network accessline 7404

"published": "2026-06-16T19:17:03.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7405

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7406

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7407

"https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7408

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7409

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",       "exploitability_score": "medium",

Network accessline 7410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7439

"published": "2026-06-16T19:17:03.180",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7440

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",         "https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7441

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7442

"https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7443

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7444

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",       "exploitability_score": "high",

Network accessline 7445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7474

"published": "2026-06-16T19:17:03.047",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7475

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",         "https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7476

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7477

"https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7478

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7479

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",       "exploitability_score": "medium",

Network accessline 7480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7509

"published": "2026-06-16T19:17:02.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",         "https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7512

"https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7513

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7514

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",       "exploitability_score": "high",

Network accessline 7515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7544

"published": "2026-06-16T19:17:02.780",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7545

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-

Network accessline 7546

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7547

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-commands"

Network accessline 7548

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7549

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",       "exploitability_score": "medium",

Network accessline 7550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7582

"published": "2026-06-16T19:17:02.650",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7583

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",         "https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7584

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7585

"https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7586

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7587

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",       "exploitability_score": "high",

Network accessline 7588

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7620

"published": "2026-06-16T19:17:02.510",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7621

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7622

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7623

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7624

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7625

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",       "exploitability_score": "medium",

Network accessline 7626

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7658

"published": "2026-06-16T19:17:02.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7659

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",         "https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7660

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7661

"https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7662

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7663

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",       "exploitability_score": "high",

Network accessline 7664

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7696

"published": "2026-06-16T19:17:02.183",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7697

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",         "https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7698

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7699

"https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7700

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7701

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",       "exploitability_score": "high",

Network accessline 7702

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7732

"published": "2026-06-16T19:17:02.053",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7733

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7734

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7735

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7736

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7737

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",       "exploitability_score": "high",

Network accessline 7738

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7769

"published": "2026-06-16T19:17:01.920",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7770

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",         "https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7771

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7772

"https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7773

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7774

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",       "exploitability_score": "medium",

Network accessline 7775

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7805

"published": "2026-06-16T19:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7806

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7807

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7808

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Network accessline 7810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",       "exploitability_score": "medium",

Network accessline 7811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Access to secretsline 7831
```
[Credential-related source omitted]
```

Network accessline 7843

"published": "2026-06-16T19:17:01.653",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7844

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7845

"https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7846

"https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7847

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7848

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",       "exploitability_score": "high",

Network accessline 7849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7879

"published": "2026-06-16T19:17:01.520",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7880

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",         "https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7881

"https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7882

"https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7883

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7884

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",       "exploitability_score": "high",

Network accessline 7885

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7917

"published": "2026-06-16T19:17:01.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",         "https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7920

"https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7921

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7922

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",       "exploitability_score": "medium",

Network accessline 7923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7954

"published": "2026-06-16T19:17:01.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7955

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",         "https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7956

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7957

"https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7958

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Network accessline 7959

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",       "exploitability_score": "high",

Network accessline 7960

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Access to secretsline 7980
```
[Credential-related source omitted]
```

Network accessline 7992

"published": "2026-06-16T19:17:01.127",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7993

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7994

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7995

"https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7996

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 7997

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",       "exploitability_score": "high",

Network accessline 7998

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 8030

"published": "2026-06-16T19:17:00.993",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8031

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",         "https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8032

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8033

"https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8034

],       "cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8035

"cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",       "exploitability_score": "medium",

Network accessline 8036

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8068

"published": "2026-06-16T19:17:00.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8069

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",         "https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8070

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8071

"https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8072

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8073

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",       "exploitability_score": "high",

Network accessline 8074

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8103

"published": "2026-06-12T22:16:55.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",         "https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8106

"https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8107

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8108

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",       "exploitability_score": "medium",

Network accessline 8109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8138

"published": "2026-06-12T22:16:55.723",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",         "https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8141

"https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8142

],       "cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8143

"cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",       "exploitability_score": "high",

Network accessline 8144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8173

"published": "2026-06-12T22:16:55.567",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",         "https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8176

"https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8177

],       "cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8178

"cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",       "exploitability_score": "low",

Network accessline 8179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8208

"published": "2026-06-12T22:16:55.413",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8211

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8212

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8213

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",       "exploitability_score": "high",

Network accessline 8214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8243

"published": "2026-06-12T22:16:55.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",         "https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8246

"https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8247

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8248

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",       "exploitability_score": "high",

Network accessline 8249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8278

"published": "2026-06-12T22:16:55.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8282

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8283

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",       "exploitability_score": "high",

Network accessline 8284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8313

"published": "2026-06-12T22:16:54.947",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8317

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8318

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",       "exploitability_score": "medium",

Network accessline 8319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8348

"published": "2026-06-12T22:16:54.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",         "https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8351

"https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8352

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8353

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",       "exploitability_score": "medium",

Network accessline 8354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8383

"published": "2026-06-12T22:16:54.643",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8386

"https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8387

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8388

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",       "exploitability_score": "high",

Network accessline 8389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8418

"published": "2026-06-12T22:16:54.490",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",         "https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8421

"https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8422

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8423

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",       "exploitability_score": "medium",

Network accessline 8424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8453

"published": "2026-06-12T22:16:54.347",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",         "https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8456

"https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8457

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8458

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",       "exploitability_score": "high",

Network accessline 8459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8488

"published": "2026-06-12T22:16:54.203",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",         "https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8491

"https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8492

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8493

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",       "exploitability_score": "high",

Network accessline 8494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8523

"published": "2026-06-12T22:16:54.060",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",         "https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding

Network accessline 8525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8526

"https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding"

Network accessline 8527

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",

Network accessline 8528

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",

Network accessline 8529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 8558

"published": "2026-06-12T22:16:53.913",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",         "https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8561

"https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8562

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8563

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",       "exploitability_score": "high",

Network accessline 8564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8593

"published": "2026-06-12T22:16:53.767",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8596

"https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",       "exploitability_score": "high",

Network accessline 8599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8628

"published": "2026-06-12T22:16:53.613",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",         "https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8631

"https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8632

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8633

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",       "exploitability_score": "medium",

Network accessline 8634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8663

"published": "2026-06-12T22:16:53.463",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8666

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8667

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8668

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",       "exploitability_score": "high",

Network accessline 8669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8698

"published": "2026-06-12T22:16:53.317",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",         "https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8701

"https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",       "exploitability_score": "high",

Network accessline 8704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8733

"published": "2026-06-12T22:16:53.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",         "https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8736

"https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8737

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8738

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",       "exploitability_score": "high",

Network accessline 8739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8768

"published": "2026-06-12T22:16:53.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",         "https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8771

"https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8772

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Network accessline 8773

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",       "exploitability_score": "medium",

Network accessline 8774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Access to secretsline 8794
```
[Credential-related source omitted]
```

Network accessline 8803

"published": "2026-06-11T21:16:24.227",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8806

"https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",       "exploitability_score": "high",

Network accessline 8809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8838

"published": "2026-06-11T21:16:24.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",         "https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8841

"https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8842

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8843

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",       "exploitability_score": "medium",

Network accessline 8844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8873

"published": "2026-06-11T21:16:23.960",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",         "https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8876

"https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8877

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8878

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",       "exploitability_score": "high",

Network accessline 8879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8908

"published": "2026-06-11T21:16:23.830",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",         "https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8911

"https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8912

],       "cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8913

"cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",       "exploitability_score": "high",

Network accessline 8914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8943

"published": "2026-06-11T21:16:23.697",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",         "https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8946

"https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8947

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8948

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",       "exploitability_score": "medium",

Network accessline 8949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8978

"published": "2026-06-11T21:16:23.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8981

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8982

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 8983

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",       "exploitability_score": "high",

Network accessline 8984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 9013

"published": "2026-06-11T21:16:23.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9016

"https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9017

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9018

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",       "exploitability_score": "high",

Network accessline 9019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9048

"published": "2026-06-11T21:16:23.303",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",         "https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9051

"https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9052

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",

Network accessline 9053

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",

Network accessline 9054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 9083

"published": "2026-06-11T21:16:23.167",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9086

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9087

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9088

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",       "exploitability_score": "high",

Network accessline 9089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9118

"published": "2026-06-11T21:16:23.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9121

"https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",       "exploitability_score": "high",

Network accessline 9124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9153

"published": "2026-06-11T21:16:22.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",         "https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9156

"https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9157

],       "cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9158

"cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",       "exploitability_score": "low",

Network accessline 9159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9188

"published": "2026-06-11T21:16:22.717",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",         "https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9191

"https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9192

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9193

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",       "exploitability_score": "medium",

Network accessline 9194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9223

"published": "2026-06-11T21:16:22.580",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9227

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9228

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",       "exploitability_score": "high",

Network accessline 9229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9258

"published": "2026-06-11T21:16:22.443",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",         "https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9261

"https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",       "exploitability_score": "high",

Network accessline 9264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9292

"published": "2026-06-07T22:16:22.547",       "references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9293

"references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",         "https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9294

"https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9295

"https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9296
```
"https://vuldb.com/cve/CVE-2026-11461"
```

Network accessline 9297

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9298

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",       "exploitability_score": "medium",

Network accessline 9299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9327

"published": "2026-06-02T02:16:15.233",       "references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9328

"references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",         "https://vuldb.com/cve/CVE-2026-10548",

Network accessline 9329

"https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9330
```
"https://vuldb.com/cve/CVE-2026-10548",
```
Network accessline 9331
```
"https://vuldb.com/submit/822026"
```

Network accessline 9332

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9333

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",       "exploitability_score": "medium",

Network accessline 9334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9362

"published": "2026-06-01T06:16:38.657",       "references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9363

"references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",         "https://vuldb.com/cve/CVE-2026-10224",

Network accessline 9364

"https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9365
```
"https://vuldb.com/cve/CVE-2026-10224",
```
Network accessline 9366
```
"https://vuldb.com/submit/822022"
```

Network accessline 9367

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9368

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",       "exploitability_score": "high",

Network accessline 9369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9397

"published": "2026-06-01T06:16:37.900",       "references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9398

"references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",         "https://vuldb.com/cve/CVE-2026-10223",

Network accessline 9399

"https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9400
```
"https://vuldb.com/cve/CVE-2026-10223",
```
Network accessline 9401
```
"https://vuldb.com/submit/822021"
```

Network accessline 9402

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9403

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",       "exploitability_score": "medium",

Network accessline 9404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9432

"published": "2026-06-01T06:16:36.053",       "references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9433

"references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",         "https://vuldb.com/cve/CVE-2026-10222",

Network accessline 9434

"https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9435
```
"https://vuldb.com/cve/CVE-2026-10222",
```
Network accessline 9436
```
"https://vuldb.com/submit/822020"
```

Network accessline 9437

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9438

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",       "exploitability_score": "high",

Network accessline 9439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9467

"published": "2026-06-01T04:16:21.550",       "references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9468

"references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",         "https://vuldb.com/cve/CVE-2026-10221",

Network accessline 9469

"https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9470
```
"https://vuldb.com/cve/CVE-2026-10221",
```
Network accessline 9471
```
"https://vuldb.com/submit/822019"
```

Network accessline 9472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",       "exploitability_score": "high",

Network accessline 9474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9502

"published": "2026-06-01T04:16:21.260",       "references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9503

"references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",         "https://vuldb.com/cve/CVE-2026-10220",

Network accessline 9504

"https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9505
```
"https://vuldb.com/cve/CVE-2026-10220",
```
Network accessline 9506
```
"https://vuldb.com/submit/822018"
```

Network accessline 9507

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9508

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",       "exploitability_score": "high",

Network accessline 9509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9538

"published": "2026-05-29T16:16:26.377",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9539

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9540

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9541

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9542

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9543

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",       "exploitability_score": "high",

Network accessline 9544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9573

"published": "2026-05-29T16:16:26.230",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9574

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",         "https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9575

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9576

"https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9577

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",

Network accessline 9578

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",

Network accessline 9579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 9608

"published": "2026-05-29T16:16:26.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9609

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",         "https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

Network accessline 9610

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9611

"https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

`scripts/release-skill.sh`

Executable scriptline 1
```
#!/bin/bash
```
Dangerous shell operationline 98
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```

Network accessline 303

--notes-file -; then           echo "Warning: Failed to create GitHub release, but tag was created successfully" >&2           echo "You can manually create the release at: https://github.com/$(git remote get-url origin | sed 's/.*github.co

Network accessline 304

echo "Warning: Failed to create GitHub release, but tag was created successfully" >&2           echo "You can manually create the release at: https://github.com/$(git remote get-url origin | sed 's/.*github.com[:/]\([^.]*\).*/\1/')/releases

Network accessline 305

echo "You can manually create the release at: https://github.com/$(git remote get-url origin | sed 's/.*github.com[:/]\([^.]*\).*/\1/')/releases/new" >&2

`skills/claw-release/.clawhubignore`

Access to secretsline 10
```
[Credential-related source omitted]
```

`skills/claw-release/CHANGELOG.md`

Network accessline 17

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 18

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

`skills/claw-release/SKILL.md`

Network accessline 3

version: 0.0.4 description: Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification. homepage: https://clawsec.prompt.security

Network accessline 4

description: Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification. homepage: https://clawsec.prompt.security metadata:

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 22

**An internal tool by [Prompt Security](https://prompt.security)**

Network accessline 51

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 52

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 53

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 56
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 60

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 61

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 62

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 63

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 64

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 65

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 185

Verify at: - **GitHub Releases:** `https://github.com/prompt-security/clawsec/releases/tag/<skill-name>-v<version>`

Network accessline 186

- **GitHub Releases:** `https://github.com/prompt-security/clawsec/releases/tag/<skill-name>-v<version>`

Network accessline 268

Built by the [Prompt Security](https://prompt.security) team.

`skills/claw-release/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "keywords": ["release", "versioning", "deployment", "automation", "ci-cd", "skills"],

Network accessline 7

"homepage": "https://clawsec.prompt.security",

`skills/clawsec-clawhub-checker/CHANGELOG.md`

Network accessline 36

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 36

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 37

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 37

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

`skills/clawsec-clawhub-checker/SKILL.md`

Network accessline 3

version: 0.0.8 description: ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.8 description: ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation. homepage: https://clawsec.prompt.security

Network accessline 4

description: ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation. homepage: https://clawsec.prompt.security clawdis:

Network accessline 4

description: ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation. homepage: https://clawsec.prompt.security clawdis:

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 65

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 65

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 66

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 66

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 67

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 67

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 70
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 70
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 74

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 74

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 75

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 75

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 76

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 76

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 77

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 77

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 78

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 78

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 79

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 79

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-clawhub-checker/scripts/check_clawhub_reputation.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-clawhub-checker/scripts/setup_reputation_hook.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-clawhub-checker/skill.json`

Network accessline 5

"author": "abutbul",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "abutbul",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/clawsec-clawhub-checker/test/reputation_check.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Dangerous shell operationline 100

const result = await runScript(CHECKER_SCRIPT, ['test; rm -rf /', '', '70']);

Dangerous shell operationline 100

const result = await runScript(CHECKER_SCRIPT, ['test; rm -rf /', '', '70']);

Network accessline 123

const testName = "reputation_check: invalid version with shell metacharacters is rejected";   try {     const result = await runScript(CHECKER_SCRIPT, ['test-skill', '1.0.0; curl evil.com', '70']);

Network accessline 123

const testName = "reputation_check: invalid version with shell metacharacters is rejected";   try {     const result = await runScript(CHECKER_SCRIPT, ['test-skill', '1.0.0; curl evil.com', '70']);

Network accessline 124

try {     const result = await runScript(CHECKER_SCRIPT, ['test-skill', '1.0.0; curl evil.com', '70']);     let parsed;

Network accessline 124

try {     const result = await runScript(CHECKER_SCRIPT, ['test-skill', '1.0.0; curl evil.com', '70']);     let parsed;

Network accessline 125

const result = await runScript(CHECKER_SCRIPT, ['test-skill', '1.0.0; curl evil.com', '70']);

Network accessline 125

const result = await runScript(CHECKER_SCRIPT, ['test-skill', '1.0.0; curl evil.com', '70']);

Dangerous shell operationline 472

'--skill', 'test-skill', '--version', '1.0.0;rm -rf /', '--confirm-reputation'

Dangerous shell operationline 472

'--skill', 'test-skill', '--version', '1.0.0;rm -rf /', '--confirm-reputation'

`skills/clawsec-clawhub-checker/test/setup_reputation_hook.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-feed/.clawhubignore`

Access to secretsline 10
```
[Credential-related source omitted]
```
Access to secretsline 10
```
[Credential-related source omitted]
```

`skills/clawsec-feed/CHANGELOG.md`

Network accessline 33

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 33

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 34

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 34

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

`skills/clawsec-feed/README.md`

Network accessline 30

curl -sLO https://github.com/prompt-security/clawsec/releases/latest/download/clawsec-feed.skill

Network accessline 30

curl -sLO https://github.com/prompt-security/clawsec/releases/latest/download/clawsec-feed.skill

Network accessline 80

GNU AGPL v3.0 or later - [Prompt Security](https://prompt.security)

Network accessline 80

GNU AGPL v3.0 or later - [Prompt Security](https://prompt.security)

`skills/clawsec-feed/SKILL.md`

Network accessline 3

version: 0.0.11 description: Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator. homepage: https://clawsec.prompt

Network accessline 3

version: 0.0.11 description: Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator. homepage: https://clawsec.prompt

Network accessline 4

description: Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator. homepage: https://clawsec.prompt.security metada

Network accessline 4

description: Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator. homepage: https://clawsec.prompt.security metada

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 34

**An open source project by [Prompt Security](https://prompt.security)**

Network accessline 34

**An open source project by [Prompt Security](https://prompt.security)**

Network accessline 78

# Get latest clawsec-feed release tag LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \

Network accessline 78

# Get latest clawsec-feed release tag LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \

Network accessline 79

LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \

Network accessline 79

LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \

Network accessline 82

# Download SKILL.md from latest release SKILL_URL="https://github.com/prompt-security/clawsec/releases/download/$LATEST_TAG/SKILL.md"

Network accessline 82

# Download SKILL.md from latest release SKILL_URL="https://github.com/prompt-security/clawsec/releases/download/$LATEST_TAG/SKILL.md"

Network accessline 83

SKILL_URL="https://github.com/prompt-security/clawsec/releases/download/$LATEST_TAG/SKILL.md"

Network accessline 83

SKILL_URL="https://github.com/prompt-security/clawsec/releases/download/$LATEST_TAG/SKILL.md"

Network accessline 84

curl -sSL --fail --show-error "$SKILL_URL"

Network accessline 84

curl -sSL --fail --show-error "$SKILL_URL"

Network accessline 100

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 100

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 101

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 101

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 102

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 102

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 105
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 105
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 109

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 109

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 110

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 110

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 111

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 111

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 112

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 112

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 113

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 113

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 114

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 114

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 184

# Get latest release tag with retry logic LATEST_TAG=$(curl -sSL --retry 3 --retry-delay 1 \

Network accessline 184

# Get latest release tag with retry logic LATEST_TAG=$(curl -sSL --retry 3 --retry-delay 1 \

Network accessline 185

LATEST_TAG=$(curl -sSL --retry 3 --retry-delay 1 \

Network accessline 185

LATEST_TAG=$(curl -sSL --retry 3 --retry-delay 1 \

Network accessline 186

https://api.github.com/repos/prompt-security/ClawSec/releases | \

Network accessline 186

https://api.github.com/repos/prompt-security/ClawSec/releases | \

Network accessline 189

BASE_URL="https://github.com/prompt-security/clawsec/releases/download/$LATEST_TAG"

Network accessline 189

BASE_URL="https://github.com/prompt-security/clawsec/releases/download/$LATEST_TAG"

Dangerous shell operationline 192
```
trap "rm -rf '$TEMP_DIR'" EXIT
```
Dangerous shell operationline 192
```
trap "rm -rf '$TEMP_DIR'" EXIT
```

Network accessline 194

# Download checksums.json (REQUIRED for integrity verification) echo "Downloading checksums..." if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 194

# Download checksums.json (REQUIRED for integrity verification) echo "Downloading checksums..." if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 195

echo "Downloading checksums..." if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \      "$BASE_URL/checksums.json" -o "$TEMP_DIR/checksums.json"; then

Network accessline 195

echo "Downloading checksums..." if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \      "$BASE_URL/checksums.json" -o "$TEMP_DIR/checksums.json"; then

Network accessline 196

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 196

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 208

# PRIMARY: Try .skill artifact echo "Attempting .skill artifact installation..." if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 208

# PRIMARY: Try .skill artifact echo "Attempting .skill artifact installation..." if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 209

echo "Attempting .skill artifact installation..." if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \    "$BASE_URL/clawsec-feed.skill" -o "$TEMP_DIR/clawsec-feed.skill" 2>/dev/null; then

Network accessline 209

echo "Attempting .skill artifact installation..." if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \    "$BASE_URL/clawsec-feed.skill" -o "$TEMP_DIR/clawsec-feed.skill" 2>/dev/null; then

Network accessline 210

if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 210

if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 309

echo "Downloading: $file"   if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 309

echo "Downloading: $file"   if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 310

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 310

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \

Network accessline 393

# Use environment variable if set, otherwise use raw GitHub feed (always up-to-date) DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 393

# Use environment variable if set, otherwise use raw GitHub feed (always up-to-date) DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 394

DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 394

DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 397

# Fetch with error handling and retry logic curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL"

Network accessline 397

# Fetch with error handling and retry logic curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL"

Network accessline 398

curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL"

Network accessline 398

curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL"

Network accessline 431

# Use environment variable if set, otherwise use raw GitHub feed (always up-to-date) DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 431

# Use environment variable if set, otherwise use raw GitHub feed (always up-to-date) DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 432

DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 432

DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Dangerous shell operationline 436
```
trap "rm -f '$TEMP_FEED'" EXIT
```
Dangerous shell operationline 436
```
trap "rm -f '$TEMP_FEED'" EXIT
```

Network accessline 438

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL" -o "$TEMP_FEED"; then

Network accessline 438

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL" -o "$TEMP_FEED"; then

Network accessline 531

# Use environment variable if set, otherwise use raw GitHub feed (always up-to-date) DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 531

# Use environment variable if set, otherwise use raw GitHub feed (always up-to-date) DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 532

DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Network accessline 532

DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json"

Dangerous shell operationline 536
```
trap "rm -f '$TEMP_FEED'" EXIT
```
Dangerous shell operationline 536
```
trap "rm -f '$TEMP_FEED'" EXIT
```

Network accessline 538

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL" -o "$TEMP_FEED"; then

Network accessline 538

if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL" -o "$TEMP_FEED"; then

Dangerous shell operationline 755
```
rm -f "$TEMP_STATE"
```
Dangerous shell operationline 755
```
rm -f "$TEMP_STATE"
```

Network accessline 807

# Check latest available version LATEST_URL="https://api.github.com/repos/prompt-security/ClawSec/releases" LATEST_VERSION=$(curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$LATEST_URL" 2>/dev/null | \

Network accessline 807

# Check latest available version LATEST_URL="https://api.github.com/repos/prompt-security/ClawSec/releases" LATEST_VERSION=$(curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$LATEST_URL" 2>/dev/null | \

Network accessline 808

LATEST_URL="https://api.github.com/repos/prompt-security/ClawSec/releases" LATEST_VERSION=$(curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$LATEST_URL" 2>/dev/null | \   jq -r '[.[] | select(.tag_name | startswith("clawsec-feed-v"

Network accessline 808

LATEST_URL="https://api.github.com/repos/prompt-security/ClawSec/releases" LATEST_VERSION=$(curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$LATEST_URL" 2>/dev/null | \   jq -r '[.[] | select(.tag_name | startswith("clawsec-feed-v"

Network accessline 809

LATEST_VERSION=$(curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$LATEST_URL" 2>/dev/null | \

Network accessline 809

LATEST_VERSION=$(curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$LATEST_URL" 2>/dev/null | \

Network accessline 832

1. **Verify the source URL** - Ensure you are downloading from `https://clawsec.prompt.security` 2. **Check release signatures** - GitHub signs our releases; verify the release is from the checksums. 3. **Compare checksums** - After downloa

Network accessline 832

1. **Verify the source URL** - Ensure you are downloading from `https://clawsec.prompt.security` 2. **Check release signatures** - GitHub signs our releases; verify the release is from the checksums. 3. **Compare checksums** - After downloa

Network accessline 863

Built with 📡 by the [Prompt Security](https://prompt.security) team and the agent community.

Network accessline 863

Built with 📡 by the [Prompt Security](https://prompt.security) team and the agent community.

`skills/clawsec-feed/advisories/feed.json`

Network accessline 20

"published": "2026-10-14T21:17:36.433",       "references": [         "https://github.com/nedlir/skills-scanner-bypass",

Network accessline 20

"published": "2026-10-14T21:17:36.433",       "references": [         "https://github.com/nedlir/skills-scanner-bypass",

Network accessline 21

"references": [         "https://github.com/nedlir/skills-scanner-bypass",         "https://github.com/openclaw/clawscan/",

Network accessline 21

"references": [         "https://github.com/nedlir/skills-scanner-bypass",         "https://github.com/openclaw/clawscan/",

Network accessline 22

"https://github.com/nedlir/skills-scanner-bypass",

Network accessline 22

"https://github.com/nedlir/skills-scanner-bypass",

Network accessline 23

"https://github.com/openclaw/clawscan/",

Network accessline 23

"https://github.com/openclaw/clawscan/",

Network accessline 24

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa"

Network accessline 24

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa"

Network accessline 25

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 25

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 26

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",       "exploitability_score": "medium",

Network accessline 26

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",       "exploitability_score": "medium",

Network accessline 27

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 27

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 50

"nvd_category_id": "CWE-59",       "title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's

Network accessline 50

"nvd_category_id": "CWE-59",       "title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's

Network accessline 51

"title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused th

Network accessline 51

"title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused th

Network accessline 52

"description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused that result for every file in the message. The agent's container can write to its own session folder and

Network accessline 52

"description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused that result for every file in the message. The agent's container can write to its own session folder and

Network accessline 62

"updated": "2026-10-13T17:35:58Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 62

"updated": "2026-10-13T17:35:58Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 63

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"       ],

Network accessline 63

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"       ],

Network accessline 64

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 64

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 66

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 66

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 67

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",       "nvd_url": null,

Network accessline 67

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",       "nvd_url": null,

Network accessline 68

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 68

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 93

"nvd_category_id": "CWE-22",       "title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given.

Network accessline 93

"nvd_category_id": "CWE-22",       "title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given.

Network accessline 94

"title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given. A value that pointed outside the g

Network accessline 94

"title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given. A value that pointed outside the g

Network accessline 95
```
[Credential-related source omitted]
```
Network accessline 95
```
[Credential-related source omitted]
```
Access to secretsline 95
```
[Credential-related source omitted]
```
Access to secretsline 95
```
[Credential-related source omitted]
```

Network accessline 105

"updated": "2026-10-13T17:34:07Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 105

"updated": "2026-10-13T17:34:07Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 106

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"       ],

Network accessline 106

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"       ],

Network accessline 107

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 107

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 109

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 109

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 110

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",       "nvd_url": null,

Network accessline 110

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",       "nvd_url": null,

Network accessline 111

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 111

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 135

"nvd_category_id": "CWE-436",       "title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent in

Network accessline 135

"nvd_category_id": "CWE-436",       "title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent in

Network accessline 136

"title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it use

Network accessline 136

"title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it use

Network accessline 137

"description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it uses ncl. The check that enforces this read the arguments as the agent sent them. The command itself r

Network accessline 137

"description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it uses ncl. The check that enforces this read the arguments as the agent sent them. The command itself r

Network accessline 149

"updated": "2026-10-13T17:33:48Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 149

"updated": "2026-10-13T17:33:48Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 150

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"       ],

Network accessline 150

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"       ],

Network accessline 151

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 151

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 153

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 153

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 154

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",       "nvd_url": null,

Network accessline 154

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",       "nvd_url": null,

Network accessline 155

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 155

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 180

"nvd_category_id": "CWE-436",       "title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the ag

Network accessline 180

"nvd_category_id": "CWE-436",       "title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the ag

Network accessline 181

"title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's

Network accessline 181

"title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's

Network accessline 182

"description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's first word exactly, but the agent's container matched /clear and /upload-trace by how the word s

Network accessline 182

"description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's first word exactly, but the agent's container matched /clear and /upload-trace by how the word s

Network accessline 194

"updated": "2026-10-13T17:33:25Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 194

"updated": "2026-10-13T17:33:25Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 195

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"       ],

Network accessline 195

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"       ],

Network accessline 196

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 196

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 198

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 198

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 199

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",       "nvd_url": null,

Network accessline 199

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",       "nvd_url": null,

Network accessline 200

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 200

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 225

"nvd_category_id": "CWE-78",       "title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker

Network accessline 225

"nvd_category_id": "CWE-78",       "title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker

Network accessline 226

"title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP serve

Network accessline 226

"title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP serve

Network accessline 227

"description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP server with an attacker on the network path. Installs that use a trusted server over HTTPS, or their own serve

Network accessline 227

"description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP server with an attacker on the network path. Installs that use a trusted server over HTTPS, or their own serve

Network accessline 239

"updated": "2026-10-13T17:32:59Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 239

"updated": "2026-10-13T17:32:59Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 240

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"       ],

Network accessline 240

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"       ],

Network accessline 241

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 241

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 243

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 243

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 244

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",       "nvd_url": null,

Network accessline 244

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",       "nvd_url": null,

Network accessline 245

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 245

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 269

"nvd_category_id": "CWE-494",       "title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://.

Network accessline 269

"nvd_category_id": "CWE-494",       "title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://.

Network accessline 270

"title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP,

Network accessline 270

"title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP,

Network accessline 271

"description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP, and setup ran the script in a shell as the user running setup. Someone who could in

Network accessline 271

"description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP, and setup ran the script in a shell as the user running setup. Someone who could in

Network accessline 283

"updated": "2026-10-13T17:32:37Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 283

"updated": "2026-10-13T17:32:37Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 284

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"       ],

Network accessline 284

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"       ],

Network accessline 285

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 285

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 287

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 287

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 288

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",       "nvd_url": null,

Network accessline 288

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",       "nvd_url": null,

Network accessline 289

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 289

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 313

"nvd_category_id": "CWE-22",       "title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the tas

Network accessline 313

"nvd_category_id": "CWE-22",       "title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the tas

Network accessline 314

"title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the

Network accessline 314

"title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the

Network accessline 315

"description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the character check that the functions for adding to and deleting the same log already applied. A s

Network accessline 315

"description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the character check that the functions for adding to and deleting the same log already applied. A s

Network accessline 327

"updated": "2026-10-13T17:30:15Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 327

"updated": "2026-10-13T17:30:15Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 328

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"       ],

Network accessline 328

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"       ],

Network accessline 329

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 329

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 331

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 331

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 332

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",       "nvd_url": null,

Network accessline 332

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",       "nvd_url": null,

Network accessline 333

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 333

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 357

"nvd_category_id": "CWE-59",       "title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's in

Network accessline 357

"nvd_category_id": "CWE-59",       "title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's in

Network accessline 358

"title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the fi

Network accessline 358

"title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the fi

Network accessline 359

"description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the files in a separate step. The agent's container can write to its own session folder and runs at the same time

Network accessline 359

"description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the files in a separate step. The agent's container can write to its own session folder and runs at the same time

Network accessline 369

"updated": "2026-10-13T17:23:42Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 369

"updated": "2026-10-13T17:23:42Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 370

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"       ],

Network accessline 370

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"       ],

Network accessline 371

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 371

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 373

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 373

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 374

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",       "nvd_url": null,

Network accessline 374

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",       "nvd_url": null,

Network accessline 375

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 375

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 400

"nvd_category_id": "CWE-59",       "title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its contain

Network accessline 400

"nvd_category_id": "CWE-59",       "title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its contain

Network accessline 401

"title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code tha

Network accessline 401

"title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code tha

Network accessline 402

"description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code that worked inside those folders followed directory names that the agent could replace with

Network accessline 402

"description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code that worked inside those folders followed directory names that the agent could replace with

Network accessline 412

"updated": "2026-10-13T17:19:18Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 412

"updated": "2026-10-13T17:19:18Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 413

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"       ],

Network accessline 413

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"       ],

Network accessline 414

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 414

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 416

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 416

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 417

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",       "nvd_url": null,

Network accessline 417

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",       "nvd_url": null,

Network accessline 418

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 418

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 448

"published": "2026-10-11T13:17:20.840",       "references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 448

"published": "2026-10-11T13:17:20.840",       "references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 449

"references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c

Network accessline 449

"references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c

Network accessline 450

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 450

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 451

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/server.ts#L149",

Network accessline 451

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/server.ts#L149",

Network accessline 452

"https://hackmd.io/@haind/nexting-pinclaw-send-unauth-agent-injection"

Network accessline 452

"https://hackmd.io/@haind/nexting-pinclaw-send-unauth-agent-injection"

Network accessline 453

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 453

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 454

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",       "exploitability_score": "high",

Network accessline 454

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",       "exploitability_score": "high",

Network accessline 455

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 455

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 489

"published": "2026-10-09T17:16:46.540",       "references": [         "https://github.com/netease-youdao/LobsterAI",

Network accessline 489

"published": "2026-10-09T17:16:46.540",       "references": [         "https://github.com/netease-youdao/LobsterAI",

Network accessline 490

"references": [         "https://github.com/netease-youdao/LobsterAI",         "https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 490

"references": [         "https://github.com/netease-youdao/LobsterAI",         "https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 491

"https://github.com/netease-youdao/LobsterAI",

Network accessline 491

"https://github.com/netease-youdao/LobsterAI",

Network accessline 492

"https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 492

"https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 493

"https://github.com/netease-youdao/LobsterAI/commit/82fdfe10d1b85d0ff734aa720e18c866b4be2406"

Network accessline 493

"https://github.com/netease-youdao/LobsterAI/commit/82fdfe10d1b85d0ff734aa720e18c866b4be2406"

Network accessline 494

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 494

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 495

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",       "exploitability_score": "high",

Network accessline 495

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",       "exploitability_score": "high",

Network accessline 496

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 496

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 524

"published": "2026-09-30T20:17:20.663",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 524

"published": "2026-09-30T20:17:20.663",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 525

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",         "https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a

Network accessline 525

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",         "https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a

Network accessline 526

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 526

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 527

"https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a38f6",

Network accessline 527

"https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a38f6",

Network accessline 528

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 528

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 529

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 529

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 530

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",       "exploitability_score": "high",

Network accessline 530

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",       "exploitability_score": "high",

Network accessline 531

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 531

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 559

"published": "2026-09-30T20:17:20.197",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 559

"published": "2026-09-30T20:17:20.197",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 560

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.T

Network accessline 560

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.T

Network accessline 561

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 561

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 562

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1244-L1270",

Network accessline 562

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1244-L1270",

Network accessline 563

"https://github.com/openclaw/openclaw-windows-node/commit/16528aadaa45d7bc6718b07ccf8b01f3eb033ad1"

Network accessline 563

"https://github.com/openclaw/openclaw-windows-node/commit/16528aadaa45d7bc6718b07ccf8b01f3eb033ad1"

Network accessline 564

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",

Network accessline 564

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",

Network accessline 565

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",

Network accessline 565

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",

Network accessline 566

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 566

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 594

"published": "2026-09-30T20:17:19.790",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 594

"published": "2026-09-30T20:17:19.790",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 595

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",         "https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228

Network accessline 595

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",         "https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228

Network accessline 596

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 596

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 597

"https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228c0b07093173a043a656",

Network accessline 597

"https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228c0b07093173a043a656",

Network accessline 598

"https://github.com/openclaw/openclaw-windows-node/commit/988df5badc84ab5efd5b4e291766a1fa5e7e268a"

Network accessline 598

"https://github.com/openclaw/openclaw-windows-node/commit/988df5badc84ab5efd5b4e291766a1fa5e7e268a"

Network accessline 599

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 599

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 600

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",       "exploitability_score": "high",

Network accessline 600

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",       "exploitability_score": "high",

Network accessline 601

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 601

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 629

"published": "2026-09-30T20:17:19.330",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 629

"published": "2026-09-30T20:17:19.330",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 630

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",         "https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746b

Network accessline 630

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",         "https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746b

Network accessline 631

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 631

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 632

"https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746ba7d31512a",

Network accessline 632

"https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746ba7d31512a",

Network accessline 633

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 633

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 634

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 634

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 635

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",       "exploitability_score": "high",

Network accessline 635

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",       "exploitability_score": "high",

Network accessline 636

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 636

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 664

"published": "2026-09-30T20:17:18.857",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 664

"published": "2026-09-30T20:17:18.857",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 665

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",         "https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604

Network accessline 665

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",         "https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604

Network accessline 666

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 666

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 667

"https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e",

Network accessline 667

"https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e",

Network accessline 668

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 668

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 669

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 669

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 670

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",       "exploitability_score": "high",

Network accessline 670

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",       "exploitability_score": "high",

Network accessline 671

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 671

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 699

"published": "2026-09-30T20:17:18.373",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 699

"published": "2026-09-30T20:17:18.373",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 700

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",         "https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2

Network accessline 700

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",         "https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2

Network accessline 701

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 701

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 702

"https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2811e9d550caed9a49b4b",

Network accessline 702

"https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2811e9d550caed9a49b4b",

Network accessline 703

"https://github.com/openclaw/openclaw-windows-node/commit/31a8c6557df740232898079b21f0eb677a4119cf"

Network accessline 703

"https://github.com/openclaw/openclaw-windows-node/commit/31a8c6557df740232898079b21f0eb677a4119cf"

Network accessline 704

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 704

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 705

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",       "exploitability_score": "medium",

Network accessline 705

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",       "exploitability_score": "medium",

Network accessline 706

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 706

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 734

"published": "2026-09-29T18:17:13.893",       "references": [         "https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 734

"published": "2026-09-29T18:17:13.893",       "references": [         "https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 735

"references": [         "https://docs.openclaw.ai/releases/2026.9.4",         "https://github.com/openclaw/openclaw",

Network accessline 735

"references": [         "https://docs.openclaw.ai/releases/2026.9.4",         "https://github.com/openclaw/openclaw",

Network accessline 736

"https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 736

"https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 737
```
"https://github.com/openclaw/openclaw",
```
Network accessline 737
```
"https://github.com/openclaw/openclaw",
```

Network accessline 738

"https://github.com/openclaw/openclaw/blob/1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7/src/gateway/mcp-app-standalone.ts#L209-L215"

Network accessline 738

"https://github.com/openclaw/openclaw/blob/1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7/src/gateway/mcp-app-standalone.ts#L209-L215"

Network accessline 739

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 739

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 740

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",       "exploitability_score": "medium",

Network accessline 740

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",       "exploitability_score": "medium",

Network accessline 741

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 741

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 769

"published": "2026-09-29T18:17:13.730",       "references": [         "https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 769

"published": "2026-09-29T18:17:13.730",       "references": [         "https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 770

"references": [         "https://docs.openclaw.ai/releases/2026.9.5",         "https://github.com/openclaw/openclaw",

Network accessline 770

"references": [         "https://docs.openclaw.ai/releases/2026.9.5",         "https://github.com/openclaw/openclaw",

Network accessline 771

"https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 771

"https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 772
```
"https://github.com/openclaw/openclaw",
```
Network accessline 772
```
"https://github.com/openclaw/openclaw",
```

Network accessline 773

"https://github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-understanding/runner.attachments.ts#L40-L50"

Network accessline 773

"https://github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-understanding/runner.attachments.ts#L40-L50"

Network accessline 774

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 774

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 775

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",       "exploitability_score": "medium",

Network accessline 775

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",       "exploitability_score": "medium",

Network accessline 776

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 776

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 804

"published": "2026-09-26T14:16:40.473",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 804

"published": "2026-09-26T14:16:40.473",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 805

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 805

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 806

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 806

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 807

"https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 807

"https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 808

"https://www.vulncheck.com/advisories/clawhub-authentication-bypass-via-former-publisher-skill-control"

Network accessline 808

"https://www.vulncheck.com/advisories/clawhub-authentication-bypass-via-former-publisher-skill-control"

Network accessline 809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",       "exploitability_score": "medium",

Network accessline 810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",       "exploitability_score": "medium",

Network accessline 811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 839

"published": "2026-09-26T14:16:40.330",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 839

"published": "2026-09-26T14:16:40.330",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 840

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 840

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 841

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 841

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 842

"https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 842

"https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 843

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-skill-hiding-via-coordinated-reports"

Network accessline 843

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-skill-hiding-via-coordinated-reports"

Network accessline 844

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 844

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 845

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",       "exploitability_score": "medium",

Network accessline 845

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",       "exploitability_score": "medium",

Network accessline 846

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 846

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 874

"published": "2026-09-26T14:16:40.187",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 874

"published": "2026-09-26T14:16:40.187",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 875

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 875

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 876

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 876

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 877

"https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 877

"https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 878

"https://www.vulncheck.com/advisories/clawhub-changelog-preview-information-disclosure-via-authorization-bypass"

Network accessline 878

"https://www.vulncheck.com/advisories/clawhub-changelog-preview-information-disclosure-via-authorization-bypass"

Network accessline 879

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 879

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 880

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",       "exploitability_score": "high",

Network accessline 880

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",       "exploitability_score": "high",

Network accessline 881

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 881

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 909

"published": "2026-09-26T14:16:40.040",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 909

"published": "2026-09-26T14:16:40.040",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 910

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 910

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 911

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 911

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 912

"https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 912

"https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 913

"https://www.vulncheck.com/advisories/clawhub-ssrf-via-unchecked-dns-resolution-in-profile-image"

Network accessline 913

"https://www.vulncheck.com/advisories/clawhub-ssrf-via-unchecked-dns-resolution-in-profile-image"

Network accessline 914

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",

Network accessline 914

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",

Network accessline 915

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",

Network accessline 915

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",

Network accessline 916

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.3); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 916

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.3); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 944

"published": "2026-09-26T14:16:39.420",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 944

"published": "2026-09-26T14:16:39.420",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 945

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 945

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 946

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 946

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 947

"https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 947

"https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 948

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-quota-exhaustion-via-anonymous-api"

Network accessline 948

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-quota-exhaustion-via-anonymous-api"

Network accessline 949

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 949

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 950

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",       "exploitability_score": "high",

Network accessline 950

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",       "exploitability_score": "high",

Network accessline 951

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 951

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 979

"published": "2026-09-26T03:17:08.667",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 979

"published": "2026-09-26T03:17:08.667",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 980

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",         "https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 980

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",         "https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 981

"https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 981

"https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 982

"https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 982

"https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 983

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 983

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 984

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",       "exploitability_score": "high",

Network accessline 984

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",       "exploitability_score": "high",

Network accessline 985

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 985

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 1013

"published": "2026-09-26T03:17:08.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1013

"published": "2026-09-26T03:17:08.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1016

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1016

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1017

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1017

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1018

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",       "exploitability_score": "high",

Network accessline 1018

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",       "exploitability_score": "high",

Network accessline 1019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1047

"published": "2026-09-26T03:17:08.337",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1047

"published": "2026-09-26T03:17:08.337",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1048

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1048

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1049

"https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1049

"https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1050

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1050

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1051

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1051

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1052

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",       "exploitability_score": "medium",

Network accessline 1052

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",       "exploitability_score": "medium",

Network accessline 1053

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1053

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1081

"published": "2026-09-26T03:17:08.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1081

"published": "2026-09-26T03:17:08.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1082

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1082

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1083

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1083

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1084

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1084

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1085

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1085

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1086

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",       "exploitability_score": "high",

Network accessline 1086

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",       "exploitability_score": "high",

Network accessline 1087

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1087

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1115

"published": "2026-09-26T03:17:08.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1115

"published": "2026-09-26T03:17:08.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1116

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1116

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1117

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1117

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1118

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1118

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1119

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1119

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1120

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",       "exploitability_score": "medium",

Network accessline 1120

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",       "exploitability_score": "medium",

Network accessline 1121

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1121

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1149

"published": "2026-09-26T03:17:07.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1149

"published": "2026-09-26T03:17:07.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1150

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1150

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1151

"https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1151

"https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1152

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1152

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1153

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1153

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1154

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",       "exploitability_score": "medium",

Network accessline 1154

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",       "exploitability_score": "medium",

Network accessline 1155

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1155

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1183

"published": "2026-09-26T03:17:07.703",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1183

"published": "2026-09-26T03:17:07.703",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1184

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1184

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1185

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1185

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1186

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1186

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1187

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1187

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1188

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",       "exploitability_score": "high",

Network accessline 1188

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",       "exploitability_score": "high",

Network accessline 1189

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1189

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1217

"published": "2026-09-26T03:17:07.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1217

"published": "2026-09-26T03:17:07.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1218

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1218

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1219

"https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1219

"https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1220

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1220

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1221

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1221

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1222

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",       "exploitability_score": "medium",

Network accessline 1222

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",       "exploitability_score": "medium",

Network accessline 1223

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1223

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1251

"published": "2026-09-26T03:17:07.403",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1251

"published": "2026-09-26T03:17:07.403",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1252

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1252

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1253

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1253

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1254

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1254

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1255

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1255

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1256

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",       "exploitability_score": "medium",

Network accessline 1256

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",       "exploitability_score": "medium",

Network accessline 1257

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1257

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1285

"published": "2026-09-26T03:17:07.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1285

"published": "2026-09-26T03:17:07.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1286

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1286

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1287

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1287

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1288

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1288

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1289

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1289

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1290

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",       "exploitability_score": "medium",

Network accessline 1290

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",       "exploitability_score": "medium",

Network accessline 1291

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1291

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1319

"published": "2026-09-26T03:17:07.110",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1319

"published": "2026-09-26T03:17:07.110",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1320

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1320

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1321

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1321

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1322

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1322

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1323

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1323

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1324

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",       "exploitability_score": "high",

Network accessline 1324

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",       "exploitability_score": "high",

Network accessline 1325

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1325

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1353

"published": "2026-09-26T03:17:06.963",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1353

"published": "2026-09-26T03:17:06.963",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1354

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1354

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1355

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1355

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1356

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1356

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1357

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1357

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1358

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",       "exploitability_score": "high",

Network accessline 1358

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",       "exploitability_score": "high",

Network accessline 1359

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1359

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1387

"published": "2026-09-26T03:17:06.810",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1387

"published": "2026-09-26T03:17:06.810",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1388

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1388

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1389

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1389

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1390

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1390

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1391

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1391

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1392

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",       "exploitability_score": "high",

Network accessline 1392

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",       "exploitability_score": "high",

Network accessline 1393

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1393

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1421

"published": "2026-09-26T03:17:06.660",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1421

"published": "2026-09-26T03:17:06.660",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1422

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",         "https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1422

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",         "https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1423

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1423

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1424

"https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1424

"https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1425

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1425

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1426

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",       "exploitability_score": "high",

Network accessline 1426

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",       "exploitability_score": "high",

Network accessline 1427

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1427

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1455

"published": "2026-09-26T03:17:06.517",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1455

"published": "2026-09-26T03:17:06.517",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1456

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1456

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1457

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1457

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1458

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1458

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1459

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1459

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1460

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",       "exploitability_score": "high",

Network accessline 1460

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",       "exploitability_score": "high",

Network accessline 1461

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1461

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1489

"published": "2026-09-26T03:17:06.373",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1489

"published": "2026-09-26T03:17:06.373",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1490

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1490

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1491

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1491

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1492

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1492

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1493

],       "cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1493

],       "cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1494

"cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",       "exploitability_score": "high",

Network accessline 1494

"cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",       "exploitability_score": "high",

Network accessline 1495

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1495

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1523

"published": "2026-09-26T03:17:06.223",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1523

"published": "2026-09-26T03:17:06.223",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",         "https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",         "https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1526

"https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1526

"https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1527

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1527

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1528

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",       "exploitability_score": "medium",

Network accessline 1528

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",       "exploitability_score": "medium",

Network accessline 1529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1557

"published": "2026-09-26T03:17:06.080",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1557

"published": "2026-09-26T03:17:06.080",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1558

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",         "https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1558

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",         "https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1559

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1559

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1560

"https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1560

"https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1561

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Network accessline 1561

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Network accessline 1562

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",       "exploitability_score": "high",

Network accessline 1562

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",       "exploitability_score": "high",

Network accessline 1563

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Network accessline 1563

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Access to secretsline 1583
```
[Credential-related source omitted]
```
Access to secretsline 1583
```
[Credential-related source omitted]
```

Network accessline 1591

"published": "2026-09-26T03:17:05.930",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1591

"published": "2026-09-26T03:17:05.930",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1592

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",         "https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1592

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",         "https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1593

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1593

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1594

"https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1594

"https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1595

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1595

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1596

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",       "exploitability_score": "medium",

Network accessline 1596

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",       "exploitability_score": "medium",

Network accessline 1597

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1597

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1625

"published": "2026-09-26T03:17:05.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1625

"published": "2026-09-26T03:17:05.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1626

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1626

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1627

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1627

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1628

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1628

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1629

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1629

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1630

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",       "exploitability_score": "high",

Network accessline 1630

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",       "exploitability_score": "high",

Network accessline 1631

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1631

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1659

"published": "2026-09-26T03:17:05.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1659

"published": "2026-09-26T03:17:05.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1660

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1660

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1661

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1661

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1662

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1662

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1663

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1663

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1664

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",       "exploitability_score": "high",

Network accessline 1664

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",       "exploitability_score": "high",

Network accessline 1665

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1665

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1693

"published": "2026-09-26T03:17:05.483",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1693

"published": "2026-09-26T03:17:05.483",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1694

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1694

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1695

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1695

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1696

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1696

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1697

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1697

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1698

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",       "exploitability_score": "high",

Network accessline 1698

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",       "exploitability_score": "high",

Network accessline 1699

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1699

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1727

"published": "2026-09-26T03:17:05.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1727

"published": "2026-09-26T03:17:05.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1728

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1728

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1729

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1729

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1730

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1730

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1731

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",

Network accessline 1731

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",

Network accessline 1732

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",

Network accessline 1732

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",

Network accessline 1733

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 1733

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 1761

"published": "2026-09-26T03:17:05.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1761

"published": "2026-09-26T03:17:05.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1762

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1762

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1763

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1763

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1764

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1764

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1765

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",

Network accessline 1765

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",

Network accessline 1766

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",

Network accessline 1766

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",

Network accessline 1767

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 1767

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 1795

"published": "2026-09-26T03:17:05.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1795

"published": "2026-09-26T03:17:05.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1796

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",         "https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1796

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",         "https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1797

"https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1797

"https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1798

"https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1798

"https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1799

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1799

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1800

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",       "exploitability_score": "high",

Network accessline 1800

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",       "exploitability_score": "high",

Network accessline 1801

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1801

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1829

"published": "2026-09-26T03:17:04.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1829

"published": "2026-09-26T03:17:04.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1830

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1830

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1831

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1831

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1832

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1832

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1833

],       "cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",

Network accessline 1833

],       "cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",

Network accessline 1834

"cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",

Network accessline 1834

"cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",

Network accessline 1835

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.9); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 1835

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.9); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 1863

"published": "2026-09-26T03:17:04.743",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1863

"published": "2026-09-26T03:17:04.743",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1864

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1864

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1865

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1865

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1866

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1866

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1867

],       "cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1867

],       "cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1868

"cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",       "exploitability_score": "low",

Network accessline 1868

"cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",       "exploitability_score": "low",

Network accessline 1869

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1869

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1897

"published": "2026-09-26T03:17:04.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1897

"published": "2026-09-26T03:17:04.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1898

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1898

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1899

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1899

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1900

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1900

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1901

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1901

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1902

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",       "exploitability_score": "high",

Network accessline 1902

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",       "exploitability_score": "high",

Network accessline 1903

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1903

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1931

"published": "2026-09-26T03:17:04.330",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1931

"published": "2026-09-26T03:17:04.330",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1932

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1932

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1933

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1933

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1934

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1934

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1935

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Network accessline 1935

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Network accessline 1936

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",       "exploitability_score": "high",

Network accessline 1936

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",       "exploitability_score": "high",

Network accessline 1937

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Network accessline 1937

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Access to secretsline 1957
```
[Credential-related source omitted]
```
Access to secretsline 1957
```
[Credential-related source omitted]
```

Network accessline 1965

"published": "2026-09-26T03:17:04.177",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1965

"published": "2026-09-26T03:17:04.177",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1966

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1966

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1967

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1967

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1968

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1968

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1969

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1969

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1970

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",       "exploitability_score": "medium",

Network accessline 1970

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",       "exploitability_score": "medium",

Network accessline 1971

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1971

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1999

"published": "2026-09-26T03:17:04.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 1999

"published": "2026-09-26T03:17:04.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2002

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2002

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2003

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2003

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2004

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",       "exploitability_score": "high",

Network accessline 2004

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",       "exploitability_score": "high",

Network accessline 2005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2033

"published": "2026-09-26T03:17:03.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2033

"published": "2026-09-26T03:17:03.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2034

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2034

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2035

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2035

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2036

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2036

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2037

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2037

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2038

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",       "exploitability_score": "high",

Network accessline 2038

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",       "exploitability_score": "high",

Network accessline 2039

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2039

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2067

"published": "2026-09-26T03:17:03.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2067

"published": "2026-09-26T03:17:03.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2068

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2068

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2069

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2069

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2070

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2070

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2071

],       "cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",

Network accessline 2071

],       "cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",

Network accessline 2072

"cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",

Network accessline 2072

"cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",

Network accessline 2073

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.2); network accessible; SSRF affects agents making external requests",

Network accessline 2073

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.2); network accessible; SSRF affects agents making external requests",

Network accessline 2101

"published": "2026-09-26T03:17:03.593",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2101

"published": "2026-09-26T03:17:03.593",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2102

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",         "https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2102

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",         "https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2103

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2103

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2104

"https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2104

"https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2105

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2105

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2106

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",       "exploitability_score": "high",

Network accessline 2106

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",       "exploitability_score": "high",

Network accessline 2107

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2107

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2135

"published": "2026-09-26T03:17:03.447",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2135

"published": "2026-09-26T03:17:03.447",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2136

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2136

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2137

"https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2137

"https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2138

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2138

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2139

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2139

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2140

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",       "exploitability_score": "medium",

Network accessline 2140

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",       "exploitability_score": "medium",

Network accessline 2141

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2141

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2169

"published": "2026-09-26T03:17:03.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2169

"published": "2026-09-26T03:17:03.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2170

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2170

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2171

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2171

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2172

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2172

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2173

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2173

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2174

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",       "exploitability_score": "medium",

Network accessline 2174

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",       "exploitability_score": "medium",

Network accessline 2175

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2175

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2203

"published": "2026-09-26T03:17:03.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2203

"published": "2026-09-26T03:17:03.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2204

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2204

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2205

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2205

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2206

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2206

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2207

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2207

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2208

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",       "exploitability_score": "medium",

Network accessline 2208

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",       "exploitability_score": "medium",

Network accessline 2209

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2209

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2237

"published": "2026-09-26T03:17:02.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2237

"published": "2026-09-26T03:17:02.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2238

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2238

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2239

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2239

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2240

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2240

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2241

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2241

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2242

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",       "exploitability_score": "high",

Network accessline 2242

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",       "exploitability_score": "high",

Network accessline 2243

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2243

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2271

"published": "2026-09-26T03:17:02.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2271

"published": "2026-09-26T03:17:02.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2272

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2272

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2273

"https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2273

"https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2274

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2274

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2275

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2275

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2276

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",       "exploitability_score": "high",

Network accessline 2276

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",       "exploitability_score": "high",

Network accessline 2277

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2277

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2305

"published": "2026-09-26T03:17:02.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2305

"published": "2026-09-26T03:17:02.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2306

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2306

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2307

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2307

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2308

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2308

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2309

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2309

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2310

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",       "exploitability_score": "high",

Network accessline 2310

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",       "exploitability_score": "high",

Network accessline 2311

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2311

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2339

"published": "2026-09-26T03:17:02.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2339

"published": "2026-09-26T03:17:02.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2340

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2340

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2341

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2341

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2342

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2342

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2343

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2343

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2344

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",       "exploitability_score": "high",

Network accessline 2344

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",       "exploitability_score": "high",

Network accessline 2345

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2345

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2373

"published": "2026-09-26T03:17:02.387",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2373

"published": "2026-09-26T03:17:02.387",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2374

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2374

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2375

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2375

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2376

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2376

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2377

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2377

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2378

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",       "exploitability_score": "high",

Network accessline 2378

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",       "exploitability_score": "high",

Network accessline 2379

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2379

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2407

"published": "2026-09-26T03:17:02.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2407

"published": "2026-09-26T03:17:02.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2408

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2408

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2409

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2409

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2410

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2410

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2411

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2411

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2412

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",       "exploitability_score": "medium",

Network accessline 2412

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",       "exploitability_score": "medium",

Network accessline 2413

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2413

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2441

"published": "2026-09-26T03:17:02.087",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2441

"published": "2026-09-26T03:17:02.087",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2442

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2442

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2443

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2443

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2444

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2444

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2445

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",

Network accessline 2445

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",

Network accessline 2446

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",

Network accessline 2446

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",

Network accessline 2447

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.1); network accessible; SSRF affects agents making external requests",

Network accessline 2447

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.1); network accessible; SSRF affects agents making external requests",

Network accessline 2475

"published": "2026-09-26T03:17:01.933",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2475

"published": "2026-09-26T03:17:01.933",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2476

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2476

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2477

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2477

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2478

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2478

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2479

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2479

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2480

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",       "exploitability_score": "medium",

Network accessline 2480

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",       "exploitability_score": "medium",

Network accessline 2481

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2481

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2509

"published": "2026-09-26T03:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2509

"published": "2026-09-26T03:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",         "https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",         "https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2512

"https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2512

"https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2513

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2513

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2514

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",       "exploitability_score": "medium",

Network accessline 2514

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",       "exploitability_score": "medium",

Network accessline 2515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2543

"published": "2026-09-26T03:17:01.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2543

"published": "2026-09-26T03:17:01.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2544

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2544

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2545

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2545

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2546

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2546

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2547

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2547

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2548

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",       "exploitability_score": "high",

Network accessline 2548

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",       "exploitability_score": "high",

Network accessline 2549

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2549

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2577

"published": "2026-09-26T03:17:01.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2577

"published": "2026-09-26T03:17:01.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2578

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",         "https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2578

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",         "https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2579

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2579

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2580

"https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2580

"https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2581

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2581

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2582

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",       "exploitability_score": "high",

Network accessline 2582

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",       "exploitability_score": "high",

Network accessline 2583

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2583

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2611

"published": "2026-09-26T03:17:01.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2611

"published": "2026-09-26T03:17:01.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2612

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2612

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2613

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2613

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2614

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2614

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2615

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2615

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2616

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",       "exploitability_score": "medium",

Network accessline 2616

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",       "exploitability_score": "medium",

Network accessline 2617

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2617

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2645

"published": "2026-09-26T03:17:01.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2645

"published": "2026-09-26T03:17:01.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2646

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2646

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2647

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2647

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2648

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2648

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2649

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2649

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2650

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",       "exploitability_score": "medium",

Network accessline 2650

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",       "exploitability_score": "medium",

Network accessline 2651

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2651

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2679

"published": "2026-09-26T03:17:01.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2679

"published": "2026-09-26T03:17:01.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2680

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2680

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2681

"https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2681

"https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2682

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2682

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2683

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2683

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2684

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",       "exploitability_score": "medium",

Network accessline 2684

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",       "exploitability_score": "medium",

Network accessline 2685

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2685

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2713

"published": "2026-09-26T03:17:00.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2713

"published": "2026-09-26T03:17:00.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2714

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2714

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2715

"https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2715

"https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2716

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2716

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2717

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2717

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2718

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",       "exploitability_score": "medium",

Network accessline 2718

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",       "exploitability_score": "medium",

Network accessline 2719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2747

"published": "2026-09-26T03:17:00.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2747

"published": "2026-09-26T03:17:00.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2748

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",         "https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2748

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",         "https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2749

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2749

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2750

"https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2750

"https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2751

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2751

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2752

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",       "exploitability_score": "medium",

Network accessline 2752

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",       "exploitability_score": "medium",

Network accessline 2753

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2753

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2781

"published": "2026-09-26T03:17:00.590",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2781

"published": "2026-09-26T03:17:00.590",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2782

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2782

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2783

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2783

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2784

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2784

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2785

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2785

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2786

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",       "exploitability_score": "high",

Network accessline 2786

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",       "exploitability_score": "high",

Network accessline 2787

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2787

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2815

"published": "2026-09-26T03:17:00.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2815

"published": "2026-09-26T03:17:00.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2816

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",         "https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2816

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",         "https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2817

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2817

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2818

"https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2818

"https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2819

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2819

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2820

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",       "exploitability_score": "high",

Network accessline 2820

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",       "exploitability_score": "high",

Network accessline 2821

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2821

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2849

"published": "2026-09-26T03:17:00.287",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2849

"published": "2026-09-26T03:17:00.287",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2850

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2850

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2851

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2851

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2852

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2852

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2853

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2853

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2854

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",       "exploitability_score": "high",

Network accessline 2854

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",       "exploitability_score": "high",

Network accessline 2855

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2855

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2883

"published": "2026-09-26T03:17:00.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2883

"published": "2026-09-26T03:17:00.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2884

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2884

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2885

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2885

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2886

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2886

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2887

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2887

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2888

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",       "exploitability_score": "high",

Network accessline 2888

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",       "exploitability_score": "high",

Network accessline 2889

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2889

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2917

"published": "2026-09-26T03:16:59.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2917

"published": "2026-09-26T03:16:59.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",         "https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",         "https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2920

"https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2920

"https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2921

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2921

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2922

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",       "exploitability_score": "high",

Network accessline 2922

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",       "exploitability_score": "high",

Network accessline 2923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2951

"published": "2026-09-26T03:16:59.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2951

"published": "2026-09-26T03:16:59.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2952

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",         "https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2952

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",         "https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2953

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2953

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2954

"https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2954

"https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2955

],       "cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2955

],       "cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2956

"cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",       "exploitability_score": "high",

Network accessline 2956

"cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",       "exploitability_score": "high",

Network accessline 2957

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2957

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2985

"published": "2026-09-26T03:16:59.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2985

"published": "2026-09-26T03:16:59.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2986

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2986

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2987

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2987

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2988

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2988

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2989

],       "cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 2989

],       "cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 2990

"cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",       "exploitability_score": "low",

Network accessline 2990

"cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",       "exploitability_score": "low",

Network accessline 2991

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 2991

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 3019

"published": "2026-09-26T03:16:59.537",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3019

"published": "2026-09-26T03:16:59.537",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3020

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3020

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3021

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3021

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3022

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3022

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3023

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3023

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3024

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",       "exploitability_score": "medium",

Network accessline 3024

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",       "exploitability_score": "medium",

Network accessline 3025

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3025

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3053

"published": "2026-09-26T03:16:59.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3053

"published": "2026-09-26T03:16:59.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3054

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3054

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3055

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3055

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3056

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3056

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3057

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3057

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3058

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",       "exploitability_score": "low",

Network accessline 3058

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",       "exploitability_score": "low",

Network accessline 3059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3087

"published": "2026-09-26T03:16:59.247",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3087

"published": "2026-09-26T03:16:59.247",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3088

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3088

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3089

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3089

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3090

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3090

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3091

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3091

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3092

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",       "exploitability_score": "high",

Network accessline 3092

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",       "exploitability_score": "high",

Network accessline 3093

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3093

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3121

"published": "2026-09-26T03:16:59.103",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3121

"published": "2026-09-26T03:16:59.103",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3122

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3122

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3123

"https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3123

"https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3124

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3124

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3125

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3125

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3126

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",       "exploitability_score": "high",

Network accessline 3126

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",       "exploitability_score": "high",

Network accessline 3127

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3127

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3155

"published": "2026-09-26T03:16:58.957",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3155

"published": "2026-09-26T03:16:58.957",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3156

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3156

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3157

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3157

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3158

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3158

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3159

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3159

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3160

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",       "exploitability_score": "low",

Network accessline 3160

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",       "exploitability_score": "low",

Network accessline 3161

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3161

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3189

"published": "2026-09-26T03:16:58.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3189

"published": "2026-09-26T03:16:58.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3190

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3190

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3191

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3191

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3192

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3192

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3193

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3193

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3194

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",       "exploitability_score": "medium",

Network accessline 3194

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",       "exploitability_score": "medium",

Network accessline 3195

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3195

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3223

"published": "2026-09-26T03:16:58.367",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3223

"published": "2026-09-26T03:16:58.367",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3226

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3226

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3227

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3227

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3228

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",       "exploitability_score": "high",

Network accessline 3228

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",       "exploitability_score": "high",

Network accessline 3229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3257

"published": "2026-09-26T03:16:58.217",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3257

"published": "2026-09-26T03:16:58.217",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3258

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3258

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3259

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3259

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3260

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3260

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3261

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3261

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3262

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",       "exploitability_score": "medium",

Network accessline 3262

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",       "exploitability_score": "medium",

Network accessline 3263

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3263

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3291

"published": "2026-09-26T03:16:58.057",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3291

"published": "2026-09-26T03:16:58.057",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3292

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3292

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3293

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3293

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3294

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3294

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3295

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3295

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3296

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",       "exploitability_score": "medium",

Network accessline 3296

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",       "exploitability_score": "medium",

Network accessline 3297

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3297

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3325

"published": "2026-09-26T03:16:57.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3325

"published": "2026-09-26T03:16:57.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3326

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3326

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3327

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3327

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3328

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3328

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3329

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3329

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3330

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",       "exploitability_score": "high",

Network accessline 3330

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",       "exploitability_score": "high",

Network accessline 3331

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3331

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3359

"published": "2026-09-26T03:16:57.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3359

"published": "2026-09-26T03:16:57.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3360

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",         "https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3360

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",         "https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3361

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3361

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3362

"https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3362

"https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3363

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3363

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3364

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",       "exploitability_score": "medium",

Network accessline 3364

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",       "exploitability_score": "medium",

Network accessline 3365

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3365

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3393

"published": "2026-09-26T03:16:57.563",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3393

"published": "2026-09-26T03:16:57.563",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3394

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",         "https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3394

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",         "https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3395

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3395

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3396

"https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3396

"https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3397

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3397

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3398

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",       "exploitability_score": "high",

Network accessline 3398

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",       "exploitability_score": "high",

Network accessline 3399

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3399

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3427

"published": "2026-09-22T21:17:34.583",       "references": [         "https://github.com/openclaw/openclaw",

Network accessline 3427

"published": "2026-09-22T21:17:34.583",       "references": [         "https://github.com/openclaw/openclaw",

Network accessline 3428

"references": [         "https://github.com/openclaw/openclaw",         "https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3428

"references": [         "https://github.com/openclaw/openclaw",         "https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3429
```
"https://github.com/openclaw/openclaw",
```
Network accessline 3429
```
"https://github.com/openclaw/openclaw",
```

Network accessline 3430

"https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3430

"https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3431

"https://github.com/openclaw/openclaw/commit/8361f3704dd5e151ff1325e62ff5de658b6c62e6"

Network accessline 3431

"https://github.com/openclaw/openclaw/commit/8361f3704dd5e151ff1325e62ff5de658b6c62e6"

Network accessline 3432

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3432

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3433

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",       "exploitability_score": "medium",

Network accessline 3433

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",       "exploitability_score": "medium",

Network accessline 3434

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3434

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3462

"published": "2026-09-20T23:17:03.530",       "references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3462

"published": "2026-09-20T23:17:03.530",       "references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3463

"references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",         "https://vuldb.com/cve/CVE-2026-94094",

Network accessline 3463

"references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",         "https://vuldb.com/cve/CVE-2026-94094",

Network accessline 3464

"https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3464

"https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3465
```
"https://vuldb.com/cve/CVE-2026-94094",
```
Network accessline 3465
```
"https://vuldb.com/cve/CVE-2026-94094",
```
Network accessline 3466
```
"https://vuldb.com/submit/882009"
```
Network accessline 3466
```
"https://vuldb.com/submit/882009"
```

Network accessline 3467

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3467

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3468

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",       "exploitability_score": "medium",

Network accessline 3468

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",       "exploitability_score": "medium",

Network accessline 3469

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3469

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3497

"published": "2026-09-15T15:17:32.800",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3497

"published": "2026-09-15T15:17:32.800",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3498

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3498

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3499

"https://github.com/openclaw/clawscan/",

Network accessline 3499

"https://github.com/openclaw/clawscan/",

Network accessline 3500

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3500

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3501

"https://github.com/openclaw/clawscan/issues/40"

Network accessline 3501

"https://github.com/openclaw/clawscan/issues/40"

Network accessline 3502

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3502

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3503

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",       "exploitability_score": "low",

Network accessline 3503

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",       "exploitability_score": "low",

Network accessline 3504

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3504

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3532

"published": "2026-09-15T15:17:32.567",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3532

"published": "2026-09-15T15:17:32.567",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3533

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3533

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3534

"https://github.com/openclaw/clawscan/",

Network accessline 3534

"https://github.com/openclaw/clawscan/",

Network accessline 3535

"https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3535

"https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3536

"https://github.com/openclaw/clawscan/issues/42"

Network accessline 3536

"https://github.com/openclaw/clawscan/issues/42"

Network accessline 3537

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3537

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3538

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",       "exploitability_score": "low",

Network accessline 3538

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",       "exploitability_score": "low",

Network accessline 3539

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3539

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3573

"published": "2026-09-14T21:17:41.987",       "references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3573

"published": "2026-09-14T21:17:41.987",       "references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3574

"references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",         "https://github.com/netease-youdao/LobsterAI/",

Network accessline 3574

"references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",         "https://github.com/netease-youdao/LobsterAI/",

Network accessline 3575

"https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3575

"https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3576

"https://github.com/netease-youdao/LobsterAI/",

Network accessline 3576

"https://github.com/netease-youdao/LobsterAI/",

Network accessline 3577

"https://github.com/netease-youdao/LobsterAI/issues/2181"

Network accessline 3577

"https://github.com/netease-youdao/LobsterAI/issues/2181"

Network accessline 3578

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",

Network accessline 3578

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",

Network accessline 3579

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",

Network accessline 3579

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",

Network accessline 3580

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (4.3); network accessible; SSRF affects agents making external requests",

Network accessline 3580

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (4.3); network accessible; SSRF affects agents making external requests",

Network accessline 3608

"published": "2026-09-14T18:20:28.530",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 3608

"published": "2026-09-14T18:20:28.530",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 3609

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3609

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3610

"https://github.com/nanocoai/nanoclaw/",

Network accessline 3610

"https://github.com/nanocoai/nanoclaw/",

Network accessline 3611

"https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3611

"https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3612

"https://github.com/nanocoai/nanoclaw/issues/2828"

Network accessline 3612

"https://github.com/nanocoai/nanoclaw/issues/2828"

Network accessline 3613

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3613

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3614

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",       "exploitability_score": "medium",

Network accessline 3614

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",       "exploitability_score": "medium",

Network accessline 3615

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3615

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3652

"updated": "2026-09-11T00:58:46Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3652

"updated": "2026-09-11T00:58:46Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3653

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"       ],

Network accessline 3653

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"       ],

Network accessline 3654

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3654

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3656

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3656

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3657

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",       "nvd_url": null,

Network accessline 3657

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",       "nvd_url": null,

Network accessline 3658

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3658

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3695

"updated": "2026-09-11T00:57:53Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3695

"updated": "2026-09-11T00:57:53Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3696

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"       ],

Network accessline 3696

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"       ],

Network accessline 3697

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3697

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3699

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3699

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3700

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",       "nvd_url": null,

Network accessline 3700

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",       "nvd_url": null,

Network accessline 3701

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3701

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3737

"updated": "2026-09-11T00:57:28Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3737

"updated": "2026-09-11T00:57:28Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3738

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"       ],

Network accessline 3738

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"       ],

Network accessline 3739

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3739

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3741

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3741

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3742

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",       "nvd_url": null,

Network accessline 3742

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",       "nvd_url": null,

Network accessline 3743

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3743

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3772

"published": "2026-09-03T13:06:21.603",       "references": [         "https://vuldb.com/cve/CVE-2026-85107",

Network accessline 3772

"published": "2026-09-03T13:06:21.603",       "references": [         "https://vuldb.com/cve/CVE-2026-85107",

Network accessline 3773

"references": [         "https://vuldb.com/cve/CVE-2026-85107",         "https://vuldb.com/submit/885135",

Network accessline 3773

"references": [         "https://vuldb.com/cve/CVE-2026-85107",         "https://vuldb.com/submit/885135",

Network accessline 3774
```
"https://vuldb.com/cve/CVE-2026-85107",
```
Network accessline 3774
```
"https://vuldb.com/cve/CVE-2026-85107",
```
Network accessline 3775
```
"https://vuldb.com/submit/885135",
```
Network accessline 3775
```
"https://vuldb.com/submit/885135",
```
Network accessline 3776
```
"https://vuldb.com/vuln/398314"
```
Network accessline 3776
```
"https://vuldb.com/vuln/398314"
```

Network accessline 3777

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3777

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3778

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",       "exploitability_score": "high",

Network accessline 3778

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",       "exploitability_score": "high",

Network accessline 3779

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3779

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3807

"published": "2026-09-03T13:06:21.437",       "references": [         "https://vuldb.com/cve/CVE-2026-85106",

Network accessline 3807

"published": "2026-09-03T13:06:21.437",       "references": [         "https://vuldb.com/cve/CVE-2026-85106",

Network accessline 3808

"references": [         "https://vuldb.com/cve/CVE-2026-85106",         "https://vuldb.com/submit/885132",

Network accessline 3808

"references": [         "https://vuldb.com/cve/CVE-2026-85106",         "https://vuldb.com/submit/885132",

Network accessline 3809
```
"https://vuldb.com/cve/CVE-2026-85106",
```
Network accessline 3809
```
"https://vuldb.com/cve/CVE-2026-85106",
```
Network accessline 3810
```
"https://vuldb.com/submit/885132",
```
Network accessline 3810
```
"https://vuldb.com/submit/885132",
```
Network accessline 3811
```
"https://vuldb.com/vuln/398313"
```
Network accessline 3811
```
"https://vuldb.com/vuln/398313"
```

Network accessline 3812

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",

Network accessline 3812

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",

Network accessline 3813

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",

Network accessline 3813

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",

Network accessline 3814

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 3814

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 3842

"published": "2026-09-03T13:06:21.250",       "references": [         "https://vuldb.com/cve/CVE-2026-85105",

Network accessline 3842

"published": "2026-09-03T13:06:21.250",       "references": [         "https://vuldb.com/cve/CVE-2026-85105",

Network accessline 3843

"references": [         "https://vuldb.com/cve/CVE-2026-85105",         "https://vuldb.com/submit/885131",

Network accessline 3843

"references": [         "https://vuldb.com/cve/CVE-2026-85105",         "https://vuldb.com/submit/885131",

Network accessline 3844
```
"https://vuldb.com/cve/CVE-2026-85105",
```
Network accessline 3844
```
"https://vuldb.com/cve/CVE-2026-85105",
```
Network accessline 3845
```
"https://vuldb.com/submit/885131",
```
Network accessline 3845
```
"https://vuldb.com/submit/885131",
```
Network accessline 3846
```
"https://vuldb.com/vuln/398312"
```
Network accessline 3846
```
"https://vuldb.com/vuln/398312"
```

Network accessline 3847

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3847

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3848

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",       "exploitability_score": "high",

Network accessline 3848

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",       "exploitability_score": "high",

Network accessline 3849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3877

"published": "2026-09-01T22:17:18.813",       "references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3877

"published": "2026-09-01T22:17:18.813",       "references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3878

"references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",         "https://vuldb.com/cve/CVE-2026-84289",

Network accessline 3878

"references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",         "https://vuldb.com/cve/CVE-2026-84289",

Network accessline 3879

"https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3879

"https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3880
```
"https://vuldb.com/cve/CVE-2026-84289",
```
Network accessline 3880
```
"https://vuldb.com/cve/CVE-2026-84289",
```
Network accessline 3881
```
"https://vuldb.com/submit/882960"
```
Network accessline 3881
```
"https://vuldb.com/submit/882960"
```

Network accessline 3882

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3882

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3883

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",       "exploitability_score": "high",

Network accessline 3883

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",       "exploitability_score": "high",

Network accessline 3884

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3884

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3912

"published": "2026-09-01T22:17:18.647",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3912

"published": "2026-09-01T22:17:18.647",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3913

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84288",

Network accessline 3913

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84288",

Network accessline 3914

"https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3914

"https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3915
```
"https://vuldb.com/cve/CVE-2026-84288",
```
Network accessline 3915
```
"https://vuldb.com/cve/CVE-2026-84288",
```
Network accessline 3916
```
"https://vuldb.com/submit/882873"
```
Network accessline 3916
```
"https://vuldb.com/submit/882873"
```

Network accessline 3917

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3917

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3918

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",       "exploitability_score": "medium",

Network accessline 3918

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",       "exploitability_score": "medium",

Network accessline 3919

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3919

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3947

"published": "2026-09-01T21:18:46.567",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3947

"published": "2026-09-01T21:18:46.567",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3948

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84287",

Network accessline 3948

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84287",

Network accessline 3949

"https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3949

"https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3950
```
"https://vuldb.com/cve/CVE-2026-84287",
```
Network accessline 3950
```
"https://vuldb.com/cve/CVE-2026-84287",
```
Network accessline 3951
```
"https://vuldb.com/submit/882712"
```
Network accessline 3951
```
"https://vuldb.com/submit/882712"
```

Network accessline 3952

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3952

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3953

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",       "exploitability_score": "medium",

Network accessline 3953

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",       "exploitability_score": "medium",

Network accessline 3954

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3954

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3982

"published": "2026-08-06T08:16:30.087",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 3982

"published": "2026-08-06T08:16:30.087",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 3983

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3983

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3984

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 3984

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 3985

"https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3985

"https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3986

"https://github.com/mf-yang/openclaw-cn/issues/566"

Network accessline 3986

"https://github.com/mf-yang/openclaw-cn/issues/566"

Network accessline 3987

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 3987

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 3988

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",       "exploitability_score": "medium",

Network accessline 3988

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",       "exploitability_score": "medium",

Network accessline 3989

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 3989

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 4017

"published": "2026-08-06T07:16:29.947",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4017

"published": "2026-08-06T07:16:29.947",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4018

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4018

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4019

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4019

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4020

"https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4020

"https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4021
```
"https://vuldb.com/cve/CVE-2026-19007"
```
Network accessline 4021
```
"https://vuldb.com/cve/CVE-2026-19007"
```

Network accessline 4022

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4022

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4023

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",       "exploitability_score": "medium",

Network accessline 4023

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",       "exploitability_score": "medium",

Network accessline 4024

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4024

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4052

"published": "2026-08-06T07:16:29.780",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4052

"published": "2026-08-06T07:16:29.780",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4053

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4053

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4054

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4054

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4055

"https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4055

"https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4056
```
"https://vuldb.com/cve/CVE-2026-19006"
```
Network accessline 4056
```
"https://vuldb.com/cve/CVE-2026-19006"
```

Network accessline 4057

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4057

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4058

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",       "exploitability_score": "medium",

Network accessline 4058

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",       "exploitability_score": "medium",

Network accessline 4059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4087

"published": "2026-08-06T07:16:29.583",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4087

"published": "2026-08-06T07:16:29.583",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4088

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4088

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4089

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4089

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4090

"https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4090

"https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4091
```
"https://vuldb.com/cve/CVE-2026-19005"
```
Network accessline 4091
```
"https://vuldb.com/cve/CVE-2026-19005"
```

Network accessline 4092

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4092

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4093

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",       "exploitability_score": "medium",

Network accessline 4093

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",       "exploitability_score": "medium",

Network accessline 4094

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4094

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4122

"published": "2026-08-06T05:16:41.380",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4122

"published": "2026-08-06T05:16:41.380",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4123

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4123

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4124

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4124

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4125

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4125

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4126

"https://github.com/NousResearch/hermes-agent/issues/48181"

Network accessline 4126

"https://github.com/NousResearch/hermes-agent/issues/48181"

Network accessline 4127

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4127

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4128

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",       "exploitability_score": "medium",

Network accessline 4128

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",       "exploitability_score": "medium",

Network accessline 4129

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4129

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4157

"published": "2026-08-06T03:16:22.130",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4157

"published": "2026-08-06T03:16:22.130",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4158

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4158

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4159

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4159

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4160

"https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4160

"https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4161
```
"https://vuldb.com/cve/CVE-2026-18991"
```
Network accessline 4161
```
"https://vuldb.com/cve/CVE-2026-18991"
```

Network accessline 4162

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4162

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4163

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",       "exploitability_score": "high",

Network accessline 4163

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",       "exploitability_score": "high",

Network accessline 4164

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4164

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4192

"published": "2026-08-06T02:16:41.430",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4192

"published": "2026-08-06T02:16:41.430",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4193

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4193

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4194

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4194

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4195

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4195

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4196

"https://github.com/NousResearch/hermes-agent/pull/46185"

Network accessline 4196

"https://github.com/NousResearch/hermes-agent/pull/46185"

Network accessline 4197

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4197

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4198

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",       "exploitability_score": "medium",

Network accessline 4198

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",       "exploitability_score": "medium",

Network accessline 4199

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4199

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4227

"published": "2026-08-04T17:16:48.287",       "references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4227

"published": "2026-08-04T17:16:48.287",       "references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4228

"references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",         "https://vuldb.com/cve/CVE-2026-18775",

Network accessline 4228

"references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",         "https://vuldb.com/cve/CVE-2026-18775",

Network accessline 4229

"https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4229

"https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4230
```
"https://vuldb.com/cve/CVE-2026-18775",
```
Network accessline 4230
```
"https://vuldb.com/cve/CVE-2026-18775",
```
Network accessline 4231
```
"https://vuldb.com/submit/856877"
```
Network accessline 4231
```
"https://vuldb.com/submit/856877"
```

Network accessline 4232

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",

Network accessline 4232

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",

Network accessline 4233

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",

Network accessline 4233

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",

Network accessline 4234

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4234

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4262

"published": "2026-08-04T17:16:48.127",       "references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4262

"published": "2026-08-04T17:16:48.127",       "references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4263

"references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",         "https://vuldb.com/cve/CVE-2026-18774",

Network accessline 4263

"references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",         "https://vuldb.com/cve/CVE-2026-18774",

Network accessline 4264

"https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4264

"https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4265
```
"https://vuldb.com/cve/CVE-2026-18774",
```
Network accessline 4265
```
"https://vuldb.com/cve/CVE-2026-18774",
```
Network accessline 4266
```
"https://vuldb.com/submit/856875"
```
Network accessline 4266
```
"https://vuldb.com/submit/856875"
```

Network accessline 4267

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",

Network accessline 4267

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",

Network accessline 4268

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",

Network accessline 4268

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",

Network accessline 4269

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4269

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4297

"published": "2026-08-04T16:16:22.470",       "references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4297

"published": "2026-08-04T16:16:22.470",       "references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4298

"references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",         "https://vuldb.com/cve/CVE-2026-18773",

Network accessline 4298

"references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",         "https://vuldb.com/cve/CVE-2026-18773",

Network accessline 4299

"https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4299

"https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4300
```
"https://vuldb.com/cve/CVE-2026-18773",
```
Network accessline 4300
```
"https://vuldb.com/cve/CVE-2026-18773",
```
Network accessline 4301
```
"https://vuldb.com/submit/856874"
```
Network accessline 4301
```
"https://vuldb.com/submit/856874"
```

Network accessline 4302

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4302

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4303

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",       "exploitability_score": "medium",

Network accessline 4303

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",       "exploitability_score": "medium",

Network accessline 4304

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4304

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4332

"published": "2026-08-03T21:16:39.450",       "references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4332

"published": "2026-08-03T21:16:39.450",       "references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4333

"references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",         "https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4333

"references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",         "https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4334

"https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4334

"https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4335

"https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4335

"https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4336

],       "cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4336

],       "cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4337

"cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",       "exploitability_score": "unknown",

Network accessline 4337

"cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",       "exploitability_score": "unknown",

Network accessline 4338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4367

"published": "2026-07-30T23:16:53.687",       "references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4367

"published": "2026-07-30T23:16:53.687",       "references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4368

"references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4368

"references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4369

"https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4369

"https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4370

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4370

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4371

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-lastmessage-session-field"

Network accessline 4371

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-lastmessage-session-field"

Network accessline 4372

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4372

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4373

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",       "exploitability_score": "high",

Network accessline 4373

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",       "exploitability_score": "high",

Network accessline 4374

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4374

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4403

"published": "2026-07-30T21:18:12.490",       "references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4403

"published": "2026-07-30T21:18:12.490",       "references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4404

"references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4404

"references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4405

"https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4405

"https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4406

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4406

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4407

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-failed-login-username-field"

Network accessline 4407

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-failed-login-username-field"

Network accessline 4408

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4408

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4409

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",       "exploitability_score": "high",

Network accessline 4409

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",       "exploitability_score": "high",

Network accessline 4410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4438

"published": "2026-07-26T11:16:58.470",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4438

"published": "2026-07-26T11:16:58.470",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4439

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4439

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4440

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4440

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4441

"https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4441

"https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4442
```
"https://vuldb.com/cve/CVE-2026-17458"
```
Network accessline 4442
```
"https://vuldb.com/cve/CVE-2026-17458"
```

Network accessline 4443

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",

Network accessline 4443

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",

Network accessline 4444

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",

Network accessline 4444

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",

Network accessline 4445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4473

"published": "2026-07-26T10:16:25.163",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4473

"published": "2026-07-26T10:16:25.163",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4474

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4474

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4475

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4475

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4476

"https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4476

"https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4477
```
"https://vuldb.com/cve/CVE-2026-17457"
```
Network accessline 4477
```
"https://vuldb.com/cve/CVE-2026-17457"
```

Network accessline 4478

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4478

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4479

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",       "exploitability_score": "medium",

Network accessline 4479

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",       "exploitability_score": "medium",

Network accessline 4480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4508

"published": "2026-07-26T04:16:46.573",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4508

"published": "2026-07-26T04:16:46.573",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4509

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4509

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4510

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4510

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4511

"https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4511

"https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4512

"https://github.com/nanocoai/nanoclaw/issues/2762"

Network accessline 4512

"https://github.com/nanocoai/nanoclaw/issues/2762"

Network accessline 4513

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4513

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4514

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",       "exploitability_score": "medium",

Network accessline 4514

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",       "exploitability_score": "medium",

Network accessline 4515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4543

"published": "2026-07-26T03:16:32.490",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4543

"published": "2026-07-26T03:16:32.490",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4544

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4544

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4545

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4545

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4546

"https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4546

"https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4547
```
"https://vuldb.com/cve/CVE-2026-17433"
```
Network accessline 4547
```
"https://vuldb.com/cve/CVE-2026-17433"
```

Network accessline 4548

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4548

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4549

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",       "exploitability_score": "medium",

Network accessline 4549

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",       "exploitability_score": "medium",

Network accessline 4550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4578

"published": "2026-07-26T01:16:25.783",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4578

"published": "2026-07-26T01:16:25.783",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4579

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4579

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4580

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4580

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4581

"https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4581

"https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4582

"https://github.com/NousResearch/hermes-agent/issues/44729"

Network accessline 4582

"https://github.com/NousResearch/hermes-agent/issues/44729"

Network accessline 4583

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4583

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4584

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",       "exploitability_score": "medium",

Network accessline 4584

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",       "exploitability_score": "medium",

Network accessline 4585

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4585

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4613

"published": "2026-07-19T00:16:40.650",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4613

"published": "2026-07-19T00:16:40.650",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4614

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4614

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4615
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4615
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4616

"https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4616

"https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4617

"https://github.com/sipeed/picoclaw/issues/3080"

Network accessline 4617

"https://github.com/sipeed/picoclaw/issues/3080"

Network accessline 4618

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4618

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4619

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",       "exploitability_score": "high",

Network accessline 4619

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",       "exploitability_score": "high",

Network accessline 4620

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4620

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4648

"published": "2026-07-18T23:17:01.187",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4648

"published": "2026-07-18T23:17:01.187",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4649

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4649

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4650
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4650
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4651

"https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4651

"https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4652
```
"https://vuldb.com/cve/CVE-2026-16197"
```
Network accessline 4652
```
"https://vuldb.com/cve/CVE-2026-16197"
```

Network accessline 4653

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4653

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4654

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",       "exploitability_score": "medium",

Network accessline 4654

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",       "exploitability_score": "medium",

Network accessline 4655

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4655

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4683

"published": "2026-07-18T23:17:01.010",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4683

"published": "2026-07-18T23:17:01.010",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4684

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4684

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4685
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4685
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4686

"https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4686

"https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4687

"https://github.com/sipeed/picoclaw/issues/3077"

Network accessline 4687

"https://github.com/sipeed/picoclaw/issues/3077"

Network accessline 4688

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",

Network accessline 4688

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",

Network accessline 4689

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",

Network accessline 4689

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",

Network accessline 4690

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4690

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4718

"published": "2026-07-18T23:17:00.847",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4718

"published": "2026-07-18T23:17:00.847",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4719

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4719

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4720
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4720
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4721

"https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4721

"https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4722
```
"https://vuldb.com/cve/CVE-2026-16195"
```
Network accessline 4722
```
"https://vuldb.com/cve/CVE-2026-16195"
```

Network accessline 4723

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4723

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4724

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",       "exploitability_score": "medium",

Network accessline 4724

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",       "exploitability_score": "medium",

Network accessline 4725

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4725

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4753

"published": "2026-07-18T10:17:25.627",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4753

"published": "2026-07-18T10:17:25.627",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4754

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4754

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4755
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4755
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4756

"https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4756

"https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4757
```
"https://vuldb.com/cve/CVE-2026-16085"
```
Network accessline 4757
```
"https://vuldb.com/cve/CVE-2026-16085"
```

Network accessline 4758

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4758

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4759

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",       "exploitability_score": "medium",

Network accessline 4759

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",       "exploitability_score": "medium",

Network accessline 4760

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4760

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4788

"published": "2026-07-18T09:17:08.113",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4788

"published": "2026-07-18T09:17:08.113",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4789

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4789

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4790
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4790
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4791

"https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4791

"https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4792

"https://github.com/sipeed/picoclaw/issues/3074"

Network accessline 4792

"https://github.com/sipeed/picoclaw/issues/3074"

Network accessline 4793

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",

Network accessline 4793

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",

Network accessline 4794

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",

Network accessline 4794

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",

Network accessline 4795

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.3); remotely exploitable without authentication; SSRF affects agents making external r

Network accessline 4795

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.3); remotely exploitable without authentication; SSRF affects agents making external r

Network accessline 4823

"published": "2026-07-18T09:17:07.953",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4823

"published": "2026-07-18T09:17:07.953",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4824

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4824

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4825
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4825
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4826

"https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4826

"https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4827
```
"https://vuldb.com/cve/CVE-2026-16083"
```
Network accessline 4827
```
"https://vuldb.com/cve/CVE-2026-16083"
```

Network accessline 4828

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4828

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4829

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",       "exploitability_score": "high",

Network accessline 4829

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",       "exploitability_score": "high",

Network accessline 4830

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4830

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4858

"published": "2026-07-18T09:17:07.783",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4858

"published": "2026-07-18T09:17:07.783",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4859

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4859

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4860
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4860
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4861

"https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4861

"https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4862
```
"https://vuldb.com/cve/CVE-2026-16082"
```
Network accessline 4862
```
"https://vuldb.com/cve/CVE-2026-16082"
```

Network accessline 4863

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4863

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4864

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",       "exploitability_score": "medium",

Network accessline 4864

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",       "exploitability_score": "medium",

Network accessline 4865

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4865

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4893

"published": "2026-07-18T08:16:35.130",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4893

"published": "2026-07-18T08:16:35.130",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4894

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4894

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4895
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4895
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4896

"https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4896

"https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4897

"https://github.com/sipeed/picoclaw/issues/3072"

Network accessline 4897

"https://github.com/sipeed/picoclaw/issues/3072"

Network accessline 4898

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4898

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4899

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",       "exploitability_score": "medium",

Network accessline 4899

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",       "exploitability_score": "medium",

Network accessline 4900

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4900

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4929

"published": "2026-07-17T02:18:10.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4929

"published": "2026-07-17T02:18:10.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4930

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4930

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4931

"https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4931

"https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4932

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4932

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4933

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4933

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4934

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",       "exploitability_score": "high",

Network accessline 4934

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",       "exploitability_score": "high",

Network accessline 4935

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4935

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4964

"published": "2026-07-17T02:18:10.153",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4964

"published": "2026-07-17T02:18:10.153",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4965

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4965

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4966

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4966

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4967

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4967

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4968

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4968

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4969

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",       "exploitability_score": "high",

Network accessline 4969

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",       "exploitability_score": "high",

Network accessline 4970

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4970

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4999

"published": "2026-07-17T02:18:10.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 4999

"published": "2026-07-17T02:18:10.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",         "https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",         "https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5002

"https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5002

"https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5003

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",

Network accessline 5003

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",

Network accessline 5004

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",

Network accessline 5004

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",

Network accessline 5005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5034

"published": "2026-07-17T02:18:09.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5034

"published": "2026-07-17T02:18:09.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5035

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5035

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5036

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5036

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5037

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5037

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5038

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",

Network accessline 5038

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",

Network accessline 5039

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",

Network accessline 5039

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",

Network accessline 5040

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 5040

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 5069

"published": "2026-07-17T02:18:09.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5069

"published": "2026-07-17T02:18:09.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5070

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5070

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5071

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5071

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5072

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5072

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5073

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5073

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5074

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",       "exploitability_score": "medium",

Network accessline 5074

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",       "exploitability_score": "medium",

Network accessline 5075

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5075

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5103

"published": "2026-07-17T02:18:09.603",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5103

"published": "2026-07-17T02:18:09.603",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",         "https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",         "https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5106

"https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5106

"https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5107

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5107

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5108

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",       "exploitability_score": "medium",

Network accessline 5108

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",       "exploitability_score": "medium",

Network accessline 5109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5138

"published": "2026-07-17T02:18:09.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5138

"published": "2026-07-17T02:18:09.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5141

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5141

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5142

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5142

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5143

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",       "exploitability_score": "high",

Network accessline 5143

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",       "exploitability_score": "high",

Network accessline 5144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5173

"published": "2026-07-17T02:18:09.273",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5173

"published": "2026-07-17T02:18:09.273",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",         "https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",         "https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5176

"https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5176

"https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5177

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5177

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5178

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",       "exploitability_score": "medium",

Network accessline 5178

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",       "exploitability_score": "medium",

Network accessline 5179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5208

"published": "2026-07-17T02:18:09.133",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5208

"published": "2026-07-17T02:18:09.133",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5211

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5211

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5212

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5212

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5213

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",       "exploitability_score": "medium",

Network accessline 5213

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",       "exploitability_score": "medium",

Network accessline 5214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5243

"published": "2026-07-17T02:18:08.990",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5243

"published": "2026-07-17T02:18:08.990",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",         "https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",         "https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5246

"https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5246

"https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5247

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5247

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5248

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",       "exploitability_score": "high",

Network accessline 5248

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",       "exploitability_score": "high",

Network accessline 5249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5278

"published": "2026-07-17T02:18:08.847",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5278

"published": "2026-07-17T02:18:08.847",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5282

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5282

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5283

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",       "exploitability_score": "high",

Network accessline 5283

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",       "exploitability_score": "high",

Network accessline 5284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5313

"published": "2026-07-17T02:18:08.693",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5313

"published": "2026-07-17T02:18:08.693",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5317

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5317

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5318

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",       "exploitability_score": "high",

Network accessline 5318

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",       "exploitability_score": "high",

Network accessline 5319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5348

"published": "2026-07-17T02:18:08.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5348

"published": "2026-07-17T02:18:08.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5351

"https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5351

"https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5352

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5352

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5353

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",       "exploitability_score": "high",

Network accessline 5353

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",       "exploitability_score": "high",

Network accessline 5354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5383

"published": "2026-07-17T02:18:08.420",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5383

"published": "2026-07-17T02:18:08.420",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5386

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5386

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5387

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",

Network accessline 5387

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",

Network accessline 5388

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",

Network accessline 5388

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",

Network accessline 5389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.0); network accessible; SSRF affects agents making external requests",

Network accessline 5389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.0); network accessible; SSRF affects agents making external requests",

Network accessline 5418

"published": "2026-07-17T02:18:08.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5418

"published": "2026-07-17T02:18:08.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5421

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5421

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5422

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5422

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5423

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",       "exploitability_score": "high",

Network accessline 5423

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",       "exploitability_score": "high",

Network accessline 5424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5453

"published": "2026-07-17T02:18:08.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5453

"published": "2026-07-17T02:18:08.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",         "https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",         "https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5456

"https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5456

"https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5457

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5457

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5458

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",       "exploitability_score": "medium",

Network accessline 5458

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",       "exploitability_score": "medium",

Network accessline 5459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5488

"published": "2026-07-17T02:18:07.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",

Network accessline 5488

"published": "2026-07-17T02:18:07.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",

Network accessline 5489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"       ],

Network accessline 5490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"       ],

Network accessline 5491

"https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5491

"https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5492

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5492

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5493

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",       "exploitability_score": "medium",

Network accessline 5493

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",       "exploitability_score": "medium",

Network accessline 5494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5523

"published": "2026-07-17T02:18:07.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5523

"published": "2026-07-17T02:18:07.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5526

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5526

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5527

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5527

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5528

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",       "exploitability_score": "high",

Network accessline 5528

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",       "exploitability_score": "high",

Network accessline 5529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5558

"published": "2026-07-17T02:18:07.620",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5558

"published": "2026-07-17T02:18:07.620",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",         "https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",         "https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5561

"https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5561

"https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5562

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5562

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5563

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",       "exploitability_score": "medium",

Network accessline 5563

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",       "exploitability_score": "medium",

Network accessline 5564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5593

"published": "2026-07-17T02:18:07.470",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5593

"published": "2026-07-17T02:18:07.470",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",         "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",         "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5596

"https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5596

"https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",       "exploitability_score": "high",

Network accessline 5598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",       "exploitability_score": "high",

Network accessline 5599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5628

"published": "2026-07-17T02:18:07.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5628

"published": "2026-07-17T02:18:07.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5631

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5631

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5632

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5632

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5633

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",       "exploitability_score": "high",

Network accessline 5633

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",       "exploitability_score": "high",

Network accessline 5634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5663

"published": "2026-07-17T02:18:07.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5663

"published": "2026-07-17T02:18:07.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",         "https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",         "https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5666

"https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5666

"https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5667

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5667

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5668

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",       "exploitability_score": "medium",

Network accessline 5668

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",       "exploitability_score": "medium",

Network accessline 5669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5698

"published": "2026-07-17T02:18:07.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5698

"published": "2026-07-17T02:18:07.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5701

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5701

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",       "exploitability_score": "high",

Network accessline 5703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",       "exploitability_score": "high",

Network accessline 5704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5733

"published": "2026-07-17T02:18:06.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5733

"published": "2026-07-17T02:18:06.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5736

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5736

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5737

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5737

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5738

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",       "exploitability_score": "high",

Network accessline 5738

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",       "exploitability_score": "high",

Network accessline 5739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5768

"published": "2026-07-17T02:18:06.747",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5768

"published": "2026-07-17T02:18:06.747",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5771

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5771

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5772

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5772

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5773

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",       "exploitability_score": "high",

Network accessline 5773

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",       "exploitability_score": "high",

Network accessline 5774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5803

"published": "2026-07-17T02:18:06.587",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5803

"published": "2026-07-17T02:18:06.587",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",         "https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",         "https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5806

"https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5806

"https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",       "exploitability_score": "high",

Network accessline 5808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",       "exploitability_score": "high",

Network accessline 5809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5838

"published": "2026-07-17T02:18:06.430",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5838

"published": "2026-07-17T02:18:06.430",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5841

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5841

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5842

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5842

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5843

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",       "exploitability_score": "high",

Network accessline 5843

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",       "exploitability_score": "high",

Network accessline 5844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5873

"published": "2026-07-17T02:18:06.170",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5873

"published": "2026-07-17T02:18:06.170",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",         "https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",         "https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5876

"https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5876

"https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5877

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",

Network accessline 5877

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",

Network accessline 5878

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",

Network accessline 5878

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",

Network accessline 5879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5908

"published": "2026-07-13T22:16:51.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5908

"published": "2026-07-13T22:16:51.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5911

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5911

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5912

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5912

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5913

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",       "exploitability_score": "high",

Network accessline 5913

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",       "exploitability_score": "high",

Network accessline 5914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5943

"published": "2026-07-13T22:16:51.673",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5943

"published": "2026-07-13T22:16:51.673",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5946

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5946

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5947

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5947

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5948

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",       "exploitability_score": "high",

Network accessline 5948

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",       "exploitability_score": "high",

Network accessline 5949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5978

"published": "2026-07-13T22:16:51.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5978

"published": "2026-07-13T22:16:51.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5981

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5981

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5982

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 5982

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 5983

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",       "exploitability_score": "medium",

Network accessline 5983

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",       "exploitability_score": "medium",

Network accessline 5984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 5984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 6013

"published": "2026-07-13T22:16:51.380",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6013

"published": "2026-07-13T22:16:51.380",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6016

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6016

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6017

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",

Network accessline 6017

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",

Network accessline 6018

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",

Network accessline 6018

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",

Network accessline 6019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 6019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 6048

"published": "2026-07-13T22:16:51.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6048

"published": "2026-07-13T22:16:51.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6051

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6051

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6052

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6052

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6053

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",       "exploitability_score": "high",

Network accessline 6053

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",       "exploitability_score": "high",

Network accessline 6054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6083

"published": "2026-07-13T22:16:51.100",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6083

"published": "2026-07-13T22:16:51.100",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6086

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6086

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6087

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6087

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6088

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",       "exploitability_score": "high",

Network accessline 6088

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",       "exploitability_score": "high",

Network accessline 6089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6118

"published": "2026-07-13T22:16:50.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6118

"published": "2026-07-13T22:16:50.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6121

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6121

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",       "exploitability_score": "high",

Network accessline 6123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",       "exploitability_score": "high",

Network accessline 6124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6153

"published": "2026-07-13T22:16:50.600",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6153

"published": "2026-07-13T22:16:50.600",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6156

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6156

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6157

],       "cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6157

],       "cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6158

"cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",       "exploitability_score": "medium",

Network accessline 6158

"cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",       "exploitability_score": "medium",

Network accessline 6159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6188

"published": "2026-07-13T22:16:50.457",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6188

"published": "2026-07-13T22:16:50.457",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6191

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6191

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6192

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6192

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6193

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",       "exploitability_score": "high",

Network accessline 6193

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",       "exploitability_score": "high",

Network accessline 6194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6223

"published": "2026-07-13T22:16:50.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6223

"published": "2026-07-13T22:16:50.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6227

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6227

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6228

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",       "exploitability_score": "high",

Network accessline 6228

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",       "exploitability_score": "high",

Network accessline 6229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6258

"published": "2026-07-13T22:16:50.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6258

"published": "2026-07-13T22:16:50.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6261

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6261

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",       "exploitability_score": "high",

Network accessline 6263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",       "exploitability_score": "high",

Network accessline 6264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6293

"published": "2026-07-13T22:16:50.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6293

"published": "2026-07-13T22:16:50.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6294

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",         "https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6294

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",         "https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6295

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6295

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6296

"https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6296

"https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6297

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6297

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6298

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",       "exploitability_score": "high",

Network accessline 6298

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",       "exploitability_score": "high",

Network accessline 6299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6328

"published": "2026-07-13T22:16:49.893",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6328

"published": "2026-07-13T22:16:49.893",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6329

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",         "https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6329

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",         "https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6330

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6330

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6331

"https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6331

"https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6332

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6332

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6333

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",       "exploitability_score": "high",

Network accessline 6333

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",       "exploitability_score": "high",

Network accessline 6334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6363

"published": "2026-07-13T22:16:49.753",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6363

"published": "2026-07-13T22:16:49.753",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6364

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",         "https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6364

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",         "https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6365

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6365

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6366

"https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6366

"https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6367

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6367

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6368

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",       "exploitability_score": "high",

Network accessline 6368

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",       "exploitability_score": "high",

Network accessline 6369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6398

"published": "2026-07-13T22:16:49.607",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6398

"published": "2026-07-13T22:16:49.607",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6399

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6399

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6400

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6400

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6401

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6401

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6402

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6402

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6403

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",       "exploitability_score": "high",

Network accessline 6403

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",       "exploitability_score": "high",

Network accessline 6404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6432

"published": "2026-07-10T03:16:20.723",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6432

"published": "2026-07-10T03:16:20.723",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6433

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6433

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6434
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6434
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6435

"https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6435

"https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6436
```
"https://vuldb.com/cve/CVE-2026-15320"
```
Network accessline 6436
```
"https://vuldb.com/cve/CVE-2026-15320"
```

Network accessline 6437

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6437

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6438

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",       "exploitability_score": "medium",

Network accessline 6438

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",       "exploitability_score": "medium",

Network accessline 6439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6467

"published": "2026-07-10T03:16:20.433",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6467

"published": "2026-07-10T03:16:20.433",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6468

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6468

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6469
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6469
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6470

"https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6470

"https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6471

"https://github.com/sipeed/picoclaw/pull/3126"

Network accessline 6471

"https://github.com/sipeed/picoclaw/pull/3126"

Network accessline 6472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",       "exploitability_score": "high",

Network accessline 6473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",       "exploitability_score": "high",

Network accessline 6474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6502

"published": "2026-07-10T02:16:25.457",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6502

"published": "2026-07-10T02:16:25.457",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6503

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6503

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6504
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6504
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6505

"https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6505

"https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6506
```
"https://vuldb.com/cve/CVE-2026-15318"
```
Network accessline 6506
```
"https://vuldb.com/cve/CVE-2026-15318"
```

Network accessline 6507

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6507

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6508

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",       "exploitability_score": "medium",

Network accessline 6508

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",       "exploitability_score": "medium",

Network accessline 6509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6537

"published": "2026-07-10T00:16:33.027",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6537

"published": "2026-07-10T00:16:33.027",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6538

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6538

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6539
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6539
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6540

"https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6540

"https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6541
```
"https://vuldb.com/cve/CVE-2026-15317"
```
Network accessline 6541
```
"https://vuldb.com/cve/CVE-2026-15317"
```

Network accessline 6542

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",

Network accessline 6542

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",

Network accessline 6543

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",

Network accessline 6543

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",

Network accessline 6544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 6544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 6572

"published": "2026-07-10T00:16:32.853",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6572

"published": "2026-07-10T00:16:32.853",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6573

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6573

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6574

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6574

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6575

"https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6575

"https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6576

"https://github.com/NousResearch/hermes-agent/pull/42759"

Network accessline 6576

"https://github.com/NousResearch/hermes-agent/pull/42759"

Network accessline 6577

],       "cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6577

],       "cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6578

"cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",       "exploitability_score": "low",

Network accessline 6578

"cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",       "exploitability_score": "low",

Network accessline 6579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6607

"published": "2026-07-09T17:16:57.947",       "references": [         "https://github.com/AidanPark/openclaw-android/",

Network accessline 6607

"published": "2026-07-09T17:16:57.947",       "references": [         "https://github.com/AidanPark/openclaw-android/",

Network accessline 6608

"references": [         "https://github.com/AidanPark/openclaw-android/",         "https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6608

"references": [         "https://github.com/AidanPark/openclaw-android/",         "https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6609

"https://github.com/AidanPark/openclaw-android/",

Network accessline 6609

"https://github.com/AidanPark/openclaw-android/",

Network accessline 6610

"https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6610

"https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6611

"https://github.com/AidanPark/openclaw-android/pull/137"

Network accessline 6611

"https://github.com/AidanPark/openclaw-android/pull/137"

Network accessline 6612

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6612

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6613

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",       "exploitability_score": "high",

Network accessline 6613

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",       "exploitability_score": "high",

Network accessline 6614

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6614

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6643

"published": "2026-07-08T17:17:25.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6643

"published": "2026-07-08T17:17:25.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6644

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",         "https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6644

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",         "https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6645

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6645

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6646

"https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6646

"https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6647

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6647

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6648

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",       "exploitability_score": "medium",

Network accessline 6648

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",       "exploitability_score": "medium",

Network accessline 6649

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6649

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6677

"published": "2026-07-06T00:16:55.037",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6677

"published": "2026-07-06T00:16:55.037",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6678

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6678

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6679

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6679

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6680

"https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6680

"https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6681

"https://github.com/NousResearch/hermes-agent/issues/38643"

Network accessline 6681

"https://github.com/NousResearch/hermes-agent/issues/38643"

Network accessline 6682

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6682

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6683

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",       "exploitability_score": "medium",

Network accessline 6683

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",       "exploitability_score": "medium",

Network accessline 6684

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6684

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6712

"published": "2026-07-04T13:16:30.413",       "references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6712

"published": "2026-07-04T13:16:30.413",       "references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6713

"references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",         "https://vuldb.com/cve/CVE-2026-14628",

Network accessline 6713

"references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",         "https://vuldb.com/cve/CVE-2026-14628",

Network accessline 6714

"https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6714

"https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6715
```
"https://vuldb.com/cve/CVE-2026-14628",
```
Network accessline 6715
```
"https://vuldb.com/cve/CVE-2026-14628",
```
Network accessline 6716
```
"https://vuldb.com/submit/845599"
```
Network accessline 6716
```
"https://vuldb.com/submit/845599"
```

Network accessline 6717

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6717

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6718

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",       "exploitability_score": "high",

Network accessline 6718

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",       "exploitability_score": "high",

Network accessline 6719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6747

"published": "2026-07-04T13:16:30.230",       "references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6747

"published": "2026-07-04T13:16:30.230",       "references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6748

"references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",         "https://vuldb.com/cve/CVE-2026-14627",

Network accessline 6748

"references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",         "https://vuldb.com/cve/CVE-2026-14627",

Network accessline 6749

"https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6749

"https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6750
```
"https://vuldb.com/cve/CVE-2026-14627",
```
Network accessline 6750
```
"https://vuldb.com/cve/CVE-2026-14627",
```
Network accessline 6751
```
"https://vuldb.com/submit/845598"
```
Network accessline 6751
```
"https://vuldb.com/submit/845598"
```

Network accessline 6752

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6752

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6753

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",       "exploitability_score": "high",

Network accessline 6753

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",       "exploitability_score": "high",

Network accessline 6754

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6754

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6782

"published": "2026-07-04T12:16:53.903",       "references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6782

"published": "2026-07-04T12:16:53.903",       "references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6783

"references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",         "https://vuldb.com/cve/CVE-2026-14626",

Network accessline 6783

"references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",         "https://vuldb.com/cve/CVE-2026-14626",

Network accessline 6784

"https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6784

"https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6785
```
"https://vuldb.com/cve/CVE-2026-14626",
```
Network accessline 6785
```
"https://vuldb.com/cve/CVE-2026-14626",
```
Network accessline 6786
```
"https://vuldb.com/submit/845596"
```
Network accessline 6786
```
"https://vuldb.com/submit/845596"
```

Network accessline 6787

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6787

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6788

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",       "exploitability_score": "medium",

Network accessline 6788

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",       "exploitability_score": "medium",

Network accessline 6789

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6789

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6817

"published": "2026-07-04T12:16:53.740",       "references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6817

"published": "2026-07-04T12:16:53.740",       "references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6818

"references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",         "https://vuldb.com/cve/CVE-2026-14625",

Network accessline 6818

"references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",         "https://vuldb.com/cve/CVE-2026-14625",

Network accessline 6819

"https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6819

"https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6820
```
"https://vuldb.com/cve/CVE-2026-14625",
```
Network accessline 6820
```
"https://vuldb.com/cve/CVE-2026-14625",
```
Network accessline 6821
```
"https://vuldb.com/submit/845595"
```
Network accessline 6821
```
"https://vuldb.com/submit/845595"
```

Network accessline 6822

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6822

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6823

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",       "exploitability_score": "medium",

Network accessline 6823

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",       "exploitability_score": "medium",

Network accessline 6824

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6824

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6852

"published": "2026-07-03T22:16:52.943",       "references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6852

"published": "2026-07-03T22:16:52.943",       "references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6853

"references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6853

"references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6854

"https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6854

"https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6855

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6855

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6856

"https://github.com/NousResearch/hermes-agent/issues/27288"

Network accessline 6856

"https://github.com/NousResearch/hermes-agent/issues/27288"

Network accessline 6857

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6857

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6858

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",       "exploitability_score": "low",

Network accessline 6858

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",       "exploitability_score": "low",

Network accessline 6859

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6859

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6896

"updated": "2026-06-30T00:38:59Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6896

"updated": "2026-06-30T00:38:59Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6897

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"       ],

Network accessline 6897

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"       ],

Network accessline 6898

"https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6898

"https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6900

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6900

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6901

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",       "nvd_url": null,

Network accessline 6901

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",       "nvd_url": null,

Network accessline 6902

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6902

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6933

"published": "2026-06-23T19:17:11.713",       "references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6933

"published": "2026-06-23T19:17:11.713",       "references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6934

"references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"       ],

Network accessline 6934

"references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"       ],

Network accessline 6935

"https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6935

"https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6936

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6936

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6937

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",       "exploitability_score": "high",

Network accessline 6937

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",       "exploitability_score": "high",

Network accessline 6938

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6938

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6966

"published": "2026-06-23T16:17:06.040",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6966

"published": "2026-06-23T16:17:06.040",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6967

"references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",         "https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6967

"references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",         "https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6968

"https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6968

"https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6969

"https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6969

"https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6970

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-forged-channel-approval-callback"

Network accessline 6970

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-forged-channel-approval-callback"

Network accessline 6971

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 6971

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 6972

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",       "exploitability_score": "medium",

Network accessline 6972

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",       "exploitability_score": "medium",

Network accessline 6973

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 6973

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 7001

"published": "2026-06-23T16:17:05.887",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7001

"published": "2026-06-23T16:17:05.887",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7002

"references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",         "https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7002

"references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",         "https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7003

"https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7003

"https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7004

"https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7004

"https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7005

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unauthorized-create-agent-system-action"

Network accessline 7005

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unauthorized-create-agent-system-action"

Network accessline 7006

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7006

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7007

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",       "exploitability_score": "medium",

Network accessline 7007

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",       "exploitability_score": "medium",

Network accessline 7008

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7008

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7036

"published": "2026-06-23T16:17:05.753",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7036

"published": "2026-06-23T16:17:05.753",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7037

"references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",         "https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7037

"references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",         "https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7038

"https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7038

"https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7039

"https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7039

"https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7040

"https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles"

Network accessline 7040

"https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles"

Network accessline 7041

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7041

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7042

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",       "exploitability_score": "medium",

Network accessline 7042

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",       "exploitability_score": "medium",

Network accessline 7043

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7043

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7071

"published": "2026-06-23T16:17:05.397",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7071

"published": "2026-06-23T16:17:05.397",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7072

"references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",         "https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7072

"references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",         "https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7073

"https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7073

"https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7074

"https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7074

"https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7075

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unverified-approval-response-handler"

Network accessline 7075

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unverified-approval-response-handler"

Network accessline 7076

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7076

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7077

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",       "exploitability_score": "medium",

Network accessline 7077

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",       "exploitability_score": "medium",

Network accessline 7078

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7078

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7110

"published": "2026-06-16T19:17:05.023",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7110

"published": "2026-06-16T19:17:05.023",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7111

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7111

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7112

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7112

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7113

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7113

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7114

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7114

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7115

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",       "exploitability_score": "high",

Network accessline 7115

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",       "exploitability_score": "high",

Network accessline 7116

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7116

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7147

"published": "2026-06-16T19:17:04.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7147

"published": "2026-06-16T19:17:04.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7148

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7148

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7149

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7149

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7150

"https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7150

"https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7151

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Network accessline 7151

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Network accessline 7152

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",       "exploitability_score": "high",

Network accessline 7152

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",       "exploitability_score": "high",

Network accessline 7153

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Network accessline 7153

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Access to secretsline 7173
```
[Credential-related source omitted]
```
Access to secretsline 7173
```
[Credential-related source omitted]
```

Network accessline 7184

"published": "2026-06-16T19:17:04.760",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7184

"published": "2026-06-16T19:17:04.760",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7185

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",         "https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7185

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",         "https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7186

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7186

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7187

"https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7187

"https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7188

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7188

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7189

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",       "exploitability_score": "high",

Network accessline 7189

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",       "exploitability_score": "high",

Network accessline 7190

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7190

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7222

"published": "2026-06-16T19:17:04.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7222

"published": "2026-06-16T19:17:04.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7223

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",         "https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7223

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",         "https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7224

"https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7224

"https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7225

"https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7225

"https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7226

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7226

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7227

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",       "exploitability_score": "high",

Network accessline 7227

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",       "exploitability_score": "high",

Network accessline 7228

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7228

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7260

"published": "2026-06-16T19:17:04.160",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7260

"published": "2026-06-16T19:17:04.160",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7261

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",         "https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7261

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",         "https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7262

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7262

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7263

"https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7263

"https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7264

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7264

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7265

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",       "exploitability_score": "medium",

Network accessline 7265

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",       "exploitability_score": "medium",

Network accessline 7266

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7266

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7296

"published": "2026-06-16T19:17:04.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7296

"published": "2026-06-16T19:17:04.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7297

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7297

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7298

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7298

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7299

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7299

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7300

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7300

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7301

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",       "exploitability_score": "medium",

Network accessline 7301

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",       "exploitability_score": "medium",

Network accessline 7302

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7302

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7332

"published": "2026-06-16T19:17:03.573",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7332

"published": "2026-06-16T19:17:03.573",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7333

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",         "https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7333

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",         "https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7334

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7334

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7335

"https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7335

"https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7336

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7336

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7337

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",       "exploitability_score": "medium",

Network accessline 7337

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",       "exploitability_score": "medium",

Network accessline 7338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7369

"published": "2026-06-16T19:17:03.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7369

"published": "2026-06-16T19:17:03.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7370

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",         "https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7370

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",         "https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7371

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7371

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7372

"https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7372

"https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7373

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Network accessline 7373

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Network accessline 7374

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",       "exploitability_score": "medium",

Network accessline 7374

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",       "exploitability_score": "medium",

Network accessline 7375

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Network accessline 7375

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Access to secretsline 7395
```
[Credential-related source omitted]
```
Access to secretsline 7395
```
[Credential-related source omitted]
```

Network accessline 7404

"published": "2026-06-16T19:17:03.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7404

"published": "2026-06-16T19:17:03.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7405

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7405

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7406

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7406

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7407

"https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7407

"https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7408

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7408

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7409

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",       "exploitability_score": "medium",

Network accessline 7409

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",       "exploitability_score": "medium",

Network accessline 7410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7439

"published": "2026-06-16T19:17:03.180",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7439

"published": "2026-06-16T19:17:03.180",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7440

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",         "https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7440

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",         "https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7441

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7441

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7442

"https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7442

"https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7443

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7443

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7444

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",       "exploitability_score": "high",

Network accessline 7444

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",       "exploitability_score": "high",

Network accessline 7445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7474

"published": "2026-06-16T19:17:03.047",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7474

"published": "2026-06-16T19:17:03.047",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7475

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",         "https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7475

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",         "https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7476

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7476

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7477

"https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7477

"https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7478

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7478

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7479

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",       "exploitability_score": "medium",

Network accessline 7479

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",       "exploitability_score": "medium",

Network accessline 7480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7509

"published": "2026-06-16T19:17:02.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7509

"published": "2026-06-16T19:17:02.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",         "https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",         "https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7512

"https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7512

"https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7513

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7513

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7514

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",       "exploitability_score": "high",

Network accessline 7514

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",       "exploitability_score": "high",

Network accessline 7515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7544

"published": "2026-06-16T19:17:02.780",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7544

"published": "2026-06-16T19:17:02.780",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7545

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-

Network accessline 7545

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-

Network accessline 7546

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7546

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7547

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-commands"

Network accessline 7547

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-commands"

Network accessline 7548

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7548

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7549

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",       "exploitability_score": "medium",

Network accessline 7549

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",       "exploitability_score": "medium",

Network accessline 7550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7582

"published": "2026-06-16T19:17:02.650",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7582

"published": "2026-06-16T19:17:02.650",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7583

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",         "https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7583

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",         "https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7584

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7584

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7585

"https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7585

"https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7586

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7586

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7587

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",       "exploitability_score": "high",

Network accessline 7587

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",       "exploitability_score": "high",

Network accessline 7588

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7588

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7620

"published": "2026-06-16T19:17:02.510",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7620

"published": "2026-06-16T19:17:02.510",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7621

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7621

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7622

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7622

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7623

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7623

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7624

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7624

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7625

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",       "exploitability_score": "medium",

Network accessline 7625

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",       "exploitability_score": "medium",

Network accessline 7626

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7626

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7658

"published": "2026-06-16T19:17:02.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7658

"published": "2026-06-16T19:17:02.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7659

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",         "https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7659

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",         "https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7660

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7660

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7661

"https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7661

"https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7662

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7662

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7663

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",       "exploitability_score": "high",

Network accessline 7663

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",       "exploitability_score": "high",

Network accessline 7664

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7664

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7696

"published": "2026-06-16T19:17:02.183",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7696

"published": "2026-06-16T19:17:02.183",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7697

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",         "https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7697

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",         "https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7698

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7698

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7699

"https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7699

"https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7700

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7700

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7701

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",       "exploitability_score": "high",

Network accessline 7701

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",       "exploitability_score": "high",

Network accessline 7702

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7702

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7732

"published": "2026-06-16T19:17:02.053",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7732

"published": "2026-06-16T19:17:02.053",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7733

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7733

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7734

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7734

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7735

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7735

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7736

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7736

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7737

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",       "exploitability_score": "high",

Network accessline 7737

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",       "exploitability_score": "high",

Network accessline 7738

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7738

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7769

"published": "2026-06-16T19:17:01.920",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7769

"published": "2026-06-16T19:17:01.920",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7770

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",         "https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7770

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",         "https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7771

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7771

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7772

"https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7772

"https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7773

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7773

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7774

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",       "exploitability_score": "medium",

Network accessline 7774

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",       "exploitability_score": "medium",

Network accessline 7775

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7775

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7805

"published": "2026-06-16T19:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7805

"published": "2026-06-16T19:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7806

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7806

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7807

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7807

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7808

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7808

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Network accessline 7809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Network accessline 7810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",       "exploitability_score": "medium",

Network accessline 7810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",       "exploitability_score": "medium",

Network accessline 7811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Network accessline 7811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Access to secretsline 7831
```
[Credential-related source omitted]
```
Access to secretsline 7831
```
[Credential-related source omitted]
```

Network accessline 7843

"published": "2026-06-16T19:17:01.653",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7843

"published": "2026-06-16T19:17:01.653",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7844

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7844

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7845

"https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7845

"https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7846

"https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7846

"https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7847

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7847

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7848

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",       "exploitability_score": "high",

Network accessline 7848

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",       "exploitability_score": "high",

Network accessline 7849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7879

"published": "2026-06-16T19:17:01.520",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7879

"published": "2026-06-16T19:17:01.520",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7880

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",         "https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7880

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",         "https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7881

"https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7881

"https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7882

"https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7882

"https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7883

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7883

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7884

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",       "exploitability_score": "high",

Network accessline 7884

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",       "exploitability_score": "high",

Network accessline 7885

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7885

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7917

"published": "2026-06-16T19:17:01.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7917

"published": "2026-06-16T19:17:01.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",         "https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",         "https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7920

"https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7920

"https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7921

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7921

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7922

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",       "exploitability_score": "medium",

Network accessline 7922

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",       "exploitability_score": "medium",

Network accessline 7923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7954

"published": "2026-06-16T19:17:01.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7954

"published": "2026-06-16T19:17:01.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7955

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",         "https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7955

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",         "https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7956

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7956

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7957

"https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7957

"https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7958

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Network accessline 7958

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Network accessline 7959

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",       "exploitability_score": "high",

Network accessline 7959

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",       "exploitability_score": "high",

Network accessline 7960

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Network accessline 7960

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Access to secretsline 7980
```
[Credential-related source omitted]
```
Access to secretsline 7980
```
[Credential-related source omitted]
```

Network accessline 7992

"published": "2026-06-16T19:17:01.127",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7992

"published": "2026-06-16T19:17:01.127",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7993

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7993

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7994

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7994

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7995

"https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7995

"https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7996

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 7996

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 7997

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",       "exploitability_score": "high",

Network accessline 7997

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",       "exploitability_score": "high",

Network accessline 7998

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 7998

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 8030

"published": "2026-06-16T19:17:00.993",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8030

"published": "2026-06-16T19:17:00.993",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8031

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",         "https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8031

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",         "https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8032

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8032

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8033

"https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8033

"https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8034

],       "cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8034

],       "cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8035

"cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",       "exploitability_score": "medium",

Network accessline 8035

"cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",       "exploitability_score": "medium",

Network accessline 8036

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8036

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8068

"published": "2026-06-16T19:17:00.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8068

"published": "2026-06-16T19:17:00.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8069

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",         "https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8069

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",         "https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8070

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8070

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8071

"https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8071

"https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8072

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8072

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8073

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",       "exploitability_score": "high",

Network accessline 8073

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",       "exploitability_score": "high",

Network accessline 8074

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8074

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8103

"published": "2026-06-12T22:16:55.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8103

"published": "2026-06-12T22:16:55.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",         "https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",         "https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8106

"https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8106

"https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8107

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8107

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8108

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",       "exploitability_score": "medium",

Network accessline 8108

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",       "exploitability_score": "medium",

Network accessline 8109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8138

"published": "2026-06-12T22:16:55.723",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8138

"published": "2026-06-12T22:16:55.723",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",         "https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",         "https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8141

"https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8141

"https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8142

],       "cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8142

],       "cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8143

"cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",       "exploitability_score": "high",

Network accessline 8143

"cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",       "exploitability_score": "high",

Network accessline 8144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8173

"published": "2026-06-12T22:16:55.567",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8173

"published": "2026-06-12T22:16:55.567",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",         "https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",         "https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8176

"https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8176

"https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8177

],       "cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8177

],       "cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8178

"cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",       "exploitability_score": "low",

Network accessline 8178

"cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",       "exploitability_score": "low",

Network accessline 8179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8208

"published": "2026-06-12T22:16:55.413",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8208

"published": "2026-06-12T22:16:55.413",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8211

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8211

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8212

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8212

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8213

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",       "exploitability_score": "high",

Network accessline 8213

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",       "exploitability_score": "high",

Network accessline 8214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8243

"published": "2026-06-12T22:16:55.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8243

"published": "2026-06-12T22:16:55.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",         "https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",         "https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8246

"https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8246

"https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8247

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8247

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8248

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",       "exploitability_score": "high",

Network accessline 8248

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",       "exploitability_score": "high",

Network accessline 8249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8278

"published": "2026-06-12T22:16:55.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8278

"published": "2026-06-12T22:16:55.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8282

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8282

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8283

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",       "exploitability_score": "high",

Network accessline 8283

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",       "exploitability_score": "high",

Network accessline 8284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8313

"published": "2026-06-12T22:16:54.947",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8313

"published": "2026-06-12T22:16:54.947",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8317

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8317

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8318

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",       "exploitability_score": "medium",

Network accessline 8318

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",       "exploitability_score": "medium",

Network accessline 8319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8348

"published": "2026-06-12T22:16:54.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8348

"published": "2026-06-12T22:16:54.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",         "https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",         "https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8351

"https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8351

"https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8352

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8352

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8353

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",       "exploitability_score": "medium",

Network accessline 8353

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",       "exploitability_score": "medium",

Network accessline 8354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8383

"published": "2026-06-12T22:16:54.643",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8383

"published": "2026-06-12T22:16:54.643",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8386

"https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8386

"https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8387

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8387

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8388

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",       "exploitability_score": "high",

Network accessline 8388

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",       "exploitability_score": "high",

Network accessline 8389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8418

"published": "2026-06-12T22:16:54.490",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8418

"published": "2026-06-12T22:16:54.490",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",         "https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",         "https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8421

"https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8421

"https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8422

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8422

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8423

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",       "exploitability_score": "medium",

Network accessline 8423

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",       "exploitability_score": "medium",

Network accessline 8424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8453

"published": "2026-06-12T22:16:54.347",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8453

"published": "2026-06-12T22:16:54.347",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",         "https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",         "https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8456

"https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8456

"https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8457

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8457

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8458

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",       "exploitability_score": "high",

Network accessline 8458

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",       "exploitability_score": "high",

Network accessline 8459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8488

"published": "2026-06-12T22:16:54.203",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8488

"published": "2026-06-12T22:16:54.203",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",         "https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",         "https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8491

"https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8491

"https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8492

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8492

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8493

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",       "exploitability_score": "high",

Network accessline 8493

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",       "exploitability_score": "high",

Network accessline 8494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8523

"published": "2026-06-12T22:16:54.060",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8523

"published": "2026-06-12T22:16:54.060",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",         "https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding

Network accessline 8524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",         "https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding

Network accessline 8525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8526

"https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding"

Network accessline 8526

"https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding"

Network accessline 8527

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",

Network accessline 8527

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",

Network accessline 8528

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",

Network accessline 8528

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",

Network accessline 8529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 8529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 8558

"published": "2026-06-12T22:16:53.913",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8558

"published": "2026-06-12T22:16:53.913",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",         "https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",         "https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8561

"https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8561

"https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8562

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8562

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8563

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",       "exploitability_score": "high",

Network accessline 8563

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",       "exploitability_score": "high",

Network accessline 8564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8593

"published": "2026-06-12T22:16:53.767",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8593

"published": "2026-06-12T22:16:53.767",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8596

"https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8596

"https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",       "exploitability_score": "high",

Network accessline 8598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",       "exploitability_score": "high",

Network accessline 8599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8628

"published": "2026-06-12T22:16:53.613",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8628

"published": "2026-06-12T22:16:53.613",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",         "https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",         "https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8631

"https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8631

"https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8632

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8632

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8633

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",       "exploitability_score": "medium",

Network accessline 8633

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",       "exploitability_score": "medium",

Network accessline 8634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8663

"published": "2026-06-12T22:16:53.463",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8663

"published": "2026-06-12T22:16:53.463",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8666

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8666

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8667

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8667

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8668

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",       "exploitability_score": "high",

Network accessline 8668

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",       "exploitability_score": "high",

Network accessline 8669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8698

"published": "2026-06-12T22:16:53.317",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8698

"published": "2026-06-12T22:16:53.317",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",         "https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",         "https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8701

"https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8701

"https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",       "exploitability_score": "high",

Network accessline 8703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",       "exploitability_score": "high",

Network accessline 8704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8733

"published": "2026-06-12T22:16:53.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8733

"published": "2026-06-12T22:16:53.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",         "https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",         "https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8736

"https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8736

"https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8737

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8737

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8738

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",       "exploitability_score": "high",

Network accessline 8738

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",       "exploitability_score": "high",

Network accessline 8739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8768

"published": "2026-06-12T22:16:53.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8768

"published": "2026-06-12T22:16:53.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",         "https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",         "https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8771

"https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8771

"https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8772

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Network accessline 8772

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Network accessline 8773

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",       "exploitability_score": "medium",

Network accessline 8773

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",       "exploitability_score": "medium",

Network accessline 8774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Network accessline 8774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Access to secretsline 8794
```
[Credential-related source omitted]
```
Access to secretsline 8794
```
[Credential-related source omitted]
```

Network accessline 8803

"published": "2026-06-11T21:16:24.227",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8803

"published": "2026-06-11T21:16:24.227",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8806

"https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8806

"https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",       "exploitability_score": "high",

Network accessline 8808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",       "exploitability_score": "high",

Network accessline 8809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8838

"published": "2026-06-11T21:16:24.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8838

"published": "2026-06-11T21:16:24.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",         "https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",         "https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8841

"https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8841

"https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8842

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8842

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8843

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",       "exploitability_score": "medium",

Network accessline 8843

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",       "exploitability_score": "medium",

Network accessline 8844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8873

"published": "2026-06-11T21:16:23.960",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8873

"published": "2026-06-11T21:16:23.960",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",         "https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",         "https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8876

"https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8876

"https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8877

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8877

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8878

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",       "exploitability_score": "high",

Network accessline 8878

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",       "exploitability_score": "high",

Network accessline 8879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8908

"published": "2026-06-11T21:16:23.830",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8908

"published": "2026-06-11T21:16:23.830",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",         "https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",         "https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8911

"https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8911

"https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8912

],       "cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8912

],       "cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8913

"cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",       "exploitability_score": "high",

Network accessline 8913

"cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",       "exploitability_score": "high",

Network accessline 8914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8943

"published": "2026-06-11T21:16:23.697",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8943

"published": "2026-06-11T21:16:23.697",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",         "https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",         "https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8946

"https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8946

"https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8947

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8947

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8948

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",       "exploitability_score": "medium",

Network accessline 8948

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",       "exploitability_score": "medium",

Network accessline 8949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8978

"published": "2026-06-11T21:16:23.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8978

"published": "2026-06-11T21:16:23.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8981

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8981

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8982

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 8982

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 8983

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",       "exploitability_score": "high",

Network accessline 8983

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",       "exploitability_score": "high",

Network accessline 8984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 8984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 9013

"published": "2026-06-11T21:16:23.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9013

"published": "2026-06-11T21:16:23.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9016

"https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9016

"https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9017

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9017

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9018

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",       "exploitability_score": "high",

Network accessline 9018

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",       "exploitability_score": "high",

Network accessline 9019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9048

"published": "2026-06-11T21:16:23.303",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9048

"published": "2026-06-11T21:16:23.303",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",         "https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",         "https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9051

"https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9051

"https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9052

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",

Network accessline 9052

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",

Network accessline 9053

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",

Network accessline 9053

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",

Network accessline 9054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 9054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 9083

"published": "2026-06-11T21:16:23.167",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9083

"published": "2026-06-11T21:16:23.167",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9086

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9086

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9087

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9087

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9088

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",       "exploitability_score": "high",

Network accessline 9088

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",       "exploitability_score": "high",

Network accessline 9089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9118

"published": "2026-06-11T21:16:23.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9118

"published": "2026-06-11T21:16:23.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9121

"https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9121

"https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",       "exploitability_score": "high",

Network accessline 9123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",       "exploitability_score": "high",

Network accessline 9124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9153

"published": "2026-06-11T21:16:22.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9153

"published": "2026-06-11T21:16:22.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",         "https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",         "https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9156

"https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9156

"https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9157

],       "cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9157

],       "cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9158

"cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",       "exploitability_score": "low",

Network accessline 9158

"cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",       "exploitability_score": "low",

Network accessline 9159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9188

"published": "2026-06-11T21:16:22.717",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9188

"published": "2026-06-11T21:16:22.717",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",         "https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",         "https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9191

"https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9191

"https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9192

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9192

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9193

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",       "exploitability_score": "medium",

Network accessline 9193

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",       "exploitability_score": "medium",

Network accessline 9194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9223

"published": "2026-06-11T21:16:22.580",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9223

"published": "2026-06-11T21:16:22.580",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9227

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9227

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9228

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",       "exploitability_score": "high",

Network accessline 9228

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",       "exploitability_score": "high",

Network accessline 9229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9258

"published": "2026-06-11T21:16:22.443",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9258

"published": "2026-06-11T21:16:22.443",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",         "https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",         "https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9261

"https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9261

"https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",       "exploitability_score": "high",

Network accessline 9263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",       "exploitability_score": "high",

Network accessline 9264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9292

"published": "2026-06-07T22:16:22.547",       "references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9292

"published": "2026-06-07T22:16:22.547",       "references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9293

"references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",         "https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9293

"references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",         "https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9294

"https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9294

"https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9295

"https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9295

"https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9296
```
"https://vuldb.com/cve/CVE-2026-11461"
```
Network accessline 9296
```
"https://vuldb.com/cve/CVE-2026-11461"
```

Network accessline 9297

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9297

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9298

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",       "exploitability_score": "medium",

Network accessline 9298

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",       "exploitability_score": "medium",

Network accessline 9299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9327

"published": "2026-06-02T02:16:15.233",       "references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9327

"published": "2026-06-02T02:16:15.233",       "references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9328

"references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",         "https://vuldb.com/cve/CVE-2026-10548",

Network accessline 9328

"references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",         "https://vuldb.com/cve/CVE-2026-10548",

Network accessline 9329

"https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9329

"https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9330
```
"https://vuldb.com/cve/CVE-2026-10548",
```
Network accessline 9330
```
"https://vuldb.com/cve/CVE-2026-10548",
```
Network accessline 9331
```
"https://vuldb.com/submit/822026"
```
Network accessline 9331
```
"https://vuldb.com/submit/822026"
```

Network accessline 9332

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9332

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9333

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",       "exploitability_score": "medium",

Network accessline 9333

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",       "exploitability_score": "medium",

Network accessline 9334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9362

"published": "2026-06-01T06:16:38.657",       "references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9362

"published": "2026-06-01T06:16:38.657",       "references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9363

"references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",         "https://vuldb.com/cve/CVE-2026-10224",

Network accessline 9363

"references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",         "https://vuldb.com/cve/CVE-2026-10224",

Network accessline 9364

"https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9364

"https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9365
```
"https://vuldb.com/cve/CVE-2026-10224",
```
Network accessline 9365
```
"https://vuldb.com/cve/CVE-2026-10224",
```
Network accessline 9366
```
"https://vuldb.com/submit/822022"
```
Network accessline 9366
```
"https://vuldb.com/submit/822022"
```

Network accessline 9367

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9367

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9368

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",       "exploitability_score": "high",

Network accessline 9368

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",       "exploitability_score": "high",

Network accessline 9369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9397

"published": "2026-06-01T06:16:37.900",       "references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9397

"published": "2026-06-01T06:16:37.900",       "references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9398

"references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",         "https://vuldb.com/cve/CVE-2026-10223",

Network accessline 9398

"references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",         "https://vuldb.com/cve/CVE-2026-10223",

Network accessline 9399

"https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9399

"https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9400
```
"https://vuldb.com/cve/CVE-2026-10223",
```
Network accessline 9400
```
"https://vuldb.com/cve/CVE-2026-10223",
```
Network accessline 9401
```
"https://vuldb.com/submit/822021"
```
Network accessline 9401
```
"https://vuldb.com/submit/822021"
```

Network accessline 9402

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9402

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9403

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",       "exploitability_score": "medium",

Network accessline 9403

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",       "exploitability_score": "medium",

Network accessline 9404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9432

"published": "2026-06-01T06:16:36.053",       "references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9432

"published": "2026-06-01T06:16:36.053",       "references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9433

"references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",         "https://vuldb.com/cve/CVE-2026-10222",

Network accessline 9433

"references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",         "https://vuldb.com/cve/CVE-2026-10222",

Network accessline 9434

"https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9434

"https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9435
```
"https://vuldb.com/cve/CVE-2026-10222",
```
Network accessline 9435
```
"https://vuldb.com/cve/CVE-2026-10222",
```
Network accessline 9436
```
"https://vuldb.com/submit/822020"
```
Network accessline 9436
```
"https://vuldb.com/submit/822020"
```

Network accessline 9437

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9437

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9438

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",       "exploitability_score": "high",

Network accessline 9438

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",       "exploitability_score": "high",

Network accessline 9439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9467

"published": "2026-06-01T04:16:21.550",       "references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9467

"published": "2026-06-01T04:16:21.550",       "references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9468

"references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",         "https://vuldb.com/cve/CVE-2026-10221",

Network accessline 9468

"references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",         "https://vuldb.com/cve/CVE-2026-10221",

Network accessline 9469

"https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9469

"https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9470
```
"https://vuldb.com/cve/CVE-2026-10221",
```
Network accessline 9470
```
"https://vuldb.com/cve/CVE-2026-10221",
```
Network accessline 9471
```
"https://vuldb.com/submit/822019"
```
Network accessline 9471
```
"https://vuldb.com/submit/822019"
```

Network accessline 9472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",       "exploitability_score": "high",

Network accessline 9473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",       "exploitability_score": "high",

Network accessline 9474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9502

"published": "2026-06-01T04:16:21.260",       "references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9502

"published": "2026-06-01T04:16:21.260",       "references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9503

"references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",         "https://vuldb.com/cve/CVE-2026-10220",

Network accessline 9503

"references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",         "https://vuldb.com/cve/CVE-2026-10220",

Network accessline 9504

"https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9504

"https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9505
```
"https://vuldb.com/cve/CVE-2026-10220",
```
Network accessline 9505
```
"https://vuldb.com/cve/CVE-2026-10220",
```
Network accessline 9506
```
"https://vuldb.com/submit/822018"
```
Network accessline 9506
```
"https://vuldb.com/submit/822018"
```

Network accessline 9507

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9507

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9508

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",       "exploitability_score": "high",

Network accessline 9508

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",       "exploitability_score": "high",

Network accessline 9509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9538

"published": "2026-05-29T16:16:26.377",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9538

"published": "2026-05-29T16:16:26.377",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9539

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9539

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9540

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9540

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9541

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9541

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9542

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9542

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9543

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",       "exploitability_score": "high",

Network accessline 9543

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",       "exploitability_score": "high",

Network accessline 9544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9573

"published": "2026-05-29T16:16:26.230",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9573

"published": "2026-05-29T16:16:26.230",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9574

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",         "https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9574

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",         "https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9575

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9575

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9576

"https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9576

"https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9577

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",

Network accessline 9577

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",

Network accessline 9578

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",

Network accessline 9578

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",

Network accessline 9579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 9579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 9608

"published": "2026-05-29T16:16:26.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9608

"published": "2026-05-29T16:16:26.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9609

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",         "https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

Network accessline 9609

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",         "https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

Network accessline 9610

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9610

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9611

"https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

Network accessline 9611

"https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

`skills/clawsec-feed/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "keywords": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "keywords": [

Network accessline 7

"homepage": "https://clawsec.prompt.security",

Network accessline 7

"homepage": "https://clawsec.prompt.security",

Network accessline 37

"emoji": "📡",     "category": "security",     "feed_url": "https://api.github.com/repos/prompt-security/ClawSec/releases?skill=clawsec-feed",

Network accessline 37

"emoji": "📡",     "category": "security",     "feed_url": "https://api.github.com/repos/prompt-security/ClawSec/releases?skill=clawsec-feed",

Network accessline 38

"category": "security",     "feed_url": "https://api.github.com/repos/prompt-security/ClawSec/releases?skill=clawsec-feed",     "requires": {

Network accessline 38

"category": "security",     "feed_url": "https://api.github.com/repos/prompt-security/ClawSec/releases?skill=clawsec-feed",     "requires": {

Network accessline 39

"feed_url": "https://api.github.com/repos/prompt-security/ClawSec/releases?skill=clawsec-feed",

Network accessline 39

"feed_url": "https://api.github.com/repos/prompt-security/ClawSec/releases?skill=clawsec-feed",

`skills/clawsec-nanoclaw/CHANGELOG.md`

Network accessline 40

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 40

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 41

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 41

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

`skills/clawsec-nanoclaw/INSTALL.md`

Network accessline 7

ClawSec provides security advisory monitoring for NanoClaw through: - **MCP Tools**: Agents can check for vulnerabilities via `clawsec_check_advisories` - **Advisory Feed**: Automatic monitoring of https://clawsec.prompt.security/advisories

Network accessline 7

ClawSec provides security advisory monitoring for NanoClaw through: - **MCP Tools**: Agents can check for vulnerabilities via `clawsec_check_advisories` - **Advisory Feed**: Automatic monitoring of https://clawsec.prompt.security/advisories

Network accessline 8

- **MCP Tools**: Agents can check for vulnerabilities via `clawsec_check_advisories` - **Advisory Feed**: Automatic monitoring of https://clawsec.prompt.security/advisories/feed.json - **Signature Verification**: Ed25519-signed feeds ensure

Network accessline 8

- **MCP Tools**: Agents can check for vulnerabilities via `clawsec_check_advisories` - **Advisory Feed**: Automatic monitoring of https://clawsec.prompt.security/advisories/feed.json - **Signature Verification**: Ed25519-signed feeds ensure

Network accessline 9

- **Advisory Feed**: Automatic monitoring of https://clawsec.prompt.security/advisories/feed.json

Network accessline 9

- **Advisory Feed**: Automatic monitoring of https://clawsec.prompt.security/advisories/feed.json

Network accessline 228

Default: `https://clawsec.prompt.security/advisories/feed.json`

Network accessline 228

Default: `https://clawsec.prompt.security/advisories/feed.json`

Network accessline 280

2. Verify network access to `clawsec.prompt.security` 3. Check host logs for fetch errors 4. Manually trigger: `curl https://clawsec.prompt.security/advisories/feed.json`

Network accessline 280

2. Verify network access to `clawsec.prompt.security` 3. Check host logs for fetch errors 4. Manually trigger: `curl https://clawsec.prompt.security/advisories/feed.json`

Network accessline 282

4. Manually trigger: `curl https://clawsec.prompt.security/advisories/feed.json`

Network accessline 282

4. Manually trigger: `curl https://clawsec.prompt.security/advisories/feed.json`

Dangerous shell operationline 311

4. Delete the skill directory: `rm -rf skills/clawsec-nanoclaw`

Dangerous shell operationline 311

4. Delete the skill directory: `rm -rf skills/clawsec-nanoclaw`

Dangerous shell operationline 312

5. Delete the cache file: `rm /workspace/project/data/clawsec-advisory-cache.json`

Dangerous shell operationline 312

5. Delete the cache file: `rm /workspace/project/data/clawsec-advisory-cache.json`

Network accessline 317

- **Documentation**: https://clawsec.prompt.security/

Network accessline 317

- **Documentation**: https://clawsec.prompt.security/

Network accessline 318

- **Issues**: https://github.com/prompt-security/clawsec/issues

Network accessline 318

- **Issues**: https://github.com/prompt-security/clawsec/issues

`skills/clawsec-nanoclaw/README.md`

Network accessline 107

https://clawsec.prompt.security/advisories/feed.json

Network accessline 107

https://clawsec.prompt.security/advisories/feed.json

Network accessline 157

- **Issues**: https://github.com/prompt-security/clawsec/issues

Network accessline 157

- **Issues**: https://github.com/prompt-security/clawsec/issues

Network accessline 159

- NanoClaw Repository: https://github.com/qwibitai/nanoclaw

Network accessline 159

- NanoClaw Repository: https://github.com/qwibitai/nanoclaw

`skills/clawsec-nanoclaw/SKILL.md`

Network accessline 192

**Feed Source**: https://clawsec.prompt.security/advisories/feed.json

Network accessline 192

**Feed Source**: https://clawsec.prompt.security/advisories/feed.json

Network accessline 221

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 221

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 222

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 222

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 223

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 223

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 226
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 226
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 230

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 230

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 231

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 231

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 232

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 232

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 233

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 233

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 234

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 234

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 235

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 235

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/clawsec-nanoclaw/docs/INTEGRITY.md`

Dangerous shell operationline 419

rm -rf /workspace/project/data/soul-guardian/

Dangerous shell operationline 419

rm -rf /workspace/project/data/soul-guardian/

Dangerous shell operationline 453

rm /workspace/project/data/soul-guardian/audit.jsonl

Dangerous shell operationline 453

rm /workspace/project/data/soul-guardian/audit.jsonl

Dangerous shell operationline 468

find /workspace/project/data/soul-guardian/patches/ -mtime +30 -delete

Dangerous shell operationline 468

find /workspace/project/data/soul-guardian/patches/ -mtime +30 -delete

Dangerous shell operationline 471

rm /workspace/project/data/soul-guardian/quarantine/*

Dangerous shell operationline 471

rm /workspace/project/data/soul-guardian/quarantine/*

Network accessline 561

- **Documentation**: https://clawsec.prompt.security/

Network accessline 561

- **Documentation**: https://clawsec.prompt.security/

Network accessline 562

- **Issues**: https://github.com/prompt-security/clawsec/issues

Network accessline 562

- **Issues**: https://github.com/prompt-security/clawsec/issues

`skills/clawsec-nanoclaw/docs/SKILL_SIGNING.md`

Access to secretsline 58
```
[Credential-related source omitted]
```
Access to secretsline 58
```
[Credential-related source omitted]
```

Network accessline 97

Share your public key with users via: - **Pinned in repository**: Commit `clawsec-signing-public.pem` to your repo - **Website**: Host at `https://yoursite.com/clawsec-signing-public.pem`

Network accessline 97

Share your public key with users via: - **Pinned in repository**: Commit `clawsec-signing-public.pem` to your repo - **Website**: Host at `https://yoursite.com/clawsec-signing-public.pem`

Network accessline 98

- **Pinned in repository**: Commit `clawsec-signing-public.pem` to your repo - **Website**: Host at `https://yoursite.com/clawsec-signing-public.pem` - **DNS TXT record**: Publish as base64-encoded TXT record

Network accessline 98

- **Pinned in repository**: Commit `clawsec-signing-public.pem` to your repo - **Website**: Host at `https://yoursite.com/clawsec-signing-public.pem` - **DNS TXT record**: Publish as base64-encoded TXT record

Network accessline 99

- **Website**: Host at `https://yoursite.com/clawsec-signing-public.pem`

Network accessline 99

- **Website**: Host at `https://yoursite.com/clawsec-signing-public.pem`

Network accessline 210

// Download package   await fetch(url).then(r => r.arrayBuffer()).then(buf => {

Network accessline 210

// Download package   await fetch(url).then(r => r.arrayBuffer()).then(buf => {

Network accessline 211

await fetch(url).then(r => r.arrayBuffer()).then(buf => {

Network accessline 211

await fetch(url).then(r => r.arrayBuffer()).then(buf => {

Network accessline 215

// Download signature   await fetch(`${url}.sig`).then(r => r.text()).then(sig => {

Network accessline 215

// Download signature   await fetch(`${url}.sig`).then(r => r.text()).then(sig => {

Network accessline 216

await fetch(`${url}.sig`).then(r => r.text()).then(sig => {

Network accessline 216

await fetch(`${url}.sig`).then(r => r.text()).then(sig => {

Network accessline 319

**Key Question**: How do you establish trust in the public key? - **Pinned in repository**: Public key committed to ClawSec repo (trust GitHub) - **HTTPS website**: Download from `https://clawsec.prompt.security/` (trust TLS/CA)

Network accessline 319

**Key Question**: How do you establish trust in the public key? - **Pinned in repository**: Public key committed to ClawSec repo (trust GitHub) - **HTTPS website**: Download from `https://clawsec.prompt.security/` (trust TLS/CA)

Network accessline 320

- **Pinned in repository**: Public key committed to ClawSec repo (trust GitHub) - **HTTPS website**: Download from `https://clawsec.prompt.security/` (trust TLS/CA) - **Out-of-band verification**: Compare key fingerprint via phone, Signal,

Network accessline 320

- **Pinned in repository**: Public key committed to ClawSec repo (trust GitHub) - **HTTPS website**: Download from `https://clawsec.prompt.security/` (trust TLS/CA) - **Out-of-band verification**: Compare key fingerprint via phone, Signal,

Network accessline 321

- **HTTPS website**: Download from `https://clawsec.prompt.security/` (trust TLS/CA)

Network accessline 321

- **HTTPS website**: Download from `https://clawsec.prompt.security/` (trust TLS/CA)

Network accessline 377

# If missing, download signature curl -o /tmp/skill.tar.gz.sig https://example.com/skill.tar.gz.sig

Network accessline 377

# If missing, download signature curl -o /tmp/skill.tar.gz.sig https://example.com/skill.tar.gz.sig

Network accessline 378

curl -o /tmp/skill.tar.gz.sig https://example.com/skill.tar.gz.sig

Network accessline 378

curl -o /tmp/skill.tar.gz.sig https://example.com/skill.tar.gz.sig

Network accessline 393

# Re-download package and signature curl -o /tmp/skill.tar.gz https://example.com/skill.tar.gz

Network accessline 393

# Re-download package and signature curl -o /tmp/skill.tar.gz https://example.com/skill.tar.gz

Network accessline 394

curl -o /tmp/skill.tar.gz https://example.com/skill.tar.gz

Network accessline 394

curl -o /tmp/skill.tar.gz https://example.com/skill.tar.gz

Network accessline 395

curl -o /tmp/skill.tar.gz.sig https://example.com/skill.tar.gz.sig

Network accessline 395

curl -o /tmp/skill.tar.gz.sig https://example.com/skill.tar.gz.sig

Network accessline 413

# Re-download public key curl -o clawsec-signing-public.pem \

Network accessline 413

# Re-download public key curl -o clawsec-signing-public.pem \

Network accessline 414
```
curl -o clawsec-signing-public.pem \
```
Network accessline 414
```
curl -o clawsec-signing-public.pem \
```

Network accessline 415

https://clawsec.prompt.security/clawsec-signing-public.pem

Network accessline 415

https://clawsec.prompt.security/clawsec-signing-public.pem

Network accessline 479

- [Ed25519 Specification (RFC 8032)](https://tools.ietf.org/html/rfc8032)

Network accessline 479

- [Ed25519 Specification (RFC 8032)](https://tools.ietf.org/html/rfc8032)

Network accessline 480

- [OpenSSL Ed25519 Documentation](https://www.openssl.org/docs/man3.0/man7/Ed25519.html)

Network accessline 480

- [OpenSSL Ed25519 Documentation](https://www.openssl.org/docs/man3.0/man7/Ed25519.html)

Network accessline 481

- [ClawSec Security Architecture](https://clawsec.prompt.security/docs/architecture)

Network accessline 481

- [ClawSec Security Architecture](https://clawsec.prompt.security/docs/architecture)

Network accessline 482

- [Supply Chain Attack Prevention](https://owasp.org/www-community/attacks/Supply_Chain_Attack)

Network accessline 482

- [Supply Chain Attack Prevention](https://owasp.org/www-community/attacks/Supply_Chain_Attack)

`skills/clawsec-nanoclaw/guardian/integrity-monitor.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/host-services/advisory-cache.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

Network accessline 26

const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes const FEED_URL = 'https://clawsec.prompt.security/advisories/feed.json';

Network accessline 26

const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes const FEED_URL = 'https://clawsec.prompt.security/advisories/feed.json';

Network accessline 27

const FEED_URL = 'https://clawsec.prompt.security/advisories/feed.json';

Network accessline 27

const FEED_URL = 'https://clawsec.prompt.security/advisories/feed.json';

`skills/clawsec-nanoclaw/host-services/integrity-handler.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/host-services/ipc-handlers.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/host-services/skill-signature-handler.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/lib/advisories.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

Network accessline 24

const DEFAULT_FEED_URL = 'https://clawsec.prompt.security/advisories/feed.json';

Network accessline 24

const DEFAULT_FEED_URL = 'https://clawsec.prompt.security/advisories/feed.json';

`skills/clawsec-nanoclaw/lib/local_file_io.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/lib/risk.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/lib/signatures.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```
Network accessline 86
```
return fetch(url, {
```
Network accessline 86
```
return fetch(url, {
```

`skills/clawsec-nanoclaw/lib/types.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/mcp-tools/advisory-tools.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/mcp-tools/integrity-tools.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/mcp-tools/signature-verification.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-nanoclaw/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/clawsec-nanoclaw/test/security-hardening.test.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-scanner/CHANGELOG.md`

Network accessline 33

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 33

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 34

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 34

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

`skills/clawsec-scanner/SKILL.md`

Network accessline 3

version: 0.0.7 description: Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific

Network accessline 3

version: 0.0.7 description: Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific

Network accessline 4

description: Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook in

Network accessline 4

description: Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook in

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 116
```
# Utilities jq --version curl --version
```
Network accessline 116
```
# Utilities jq --version curl --version
```
Network accessline 118
```
curl --version
```
Network accessline 118
```
curl --version
```

Network accessline 133

INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.openclaw/skills}" DEST="$INSTALL_ROOT/clawsec-scanner" BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-scanner-v${VERSION}"

Network accessline 133

INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.openclaw/skills}" DEST="$INSTALL_ROOT/clawsec-scanner" BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-scanner-v${VERSION}"

Network accessline 135

BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-scanner-v${VERSION}"

Network accessline 135

BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-scanner-v${VERSION}"

Dangerous shell operationline 138
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```
Dangerous shell operationline 138
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```

Network accessline 150

# Download release archive + signed checksums curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 150

# Download release archive + signed checksums curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 151

curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 151

curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 152

curl -fsSL "$BASE/checksums.json" -o "$TEMP_DIR/checksums.json"

Network accessline 152

curl -fsSL "$BASE/checksums.json" -o "$TEMP_DIR/checksums.json"

Network accessline 153

curl -fsSL "$BASE/checksums.sig" -o "$TEMP_DIR/checksums.sig"

Network accessline 153

curl -fsSL "$BASE/checksums.sig" -o "$TEMP_DIR/checksums.sig"

Dangerous shell operationline 182
```
rm -rf "$DEST"
```
Dangerous shell operationline 182
```
rm -rf "$DEST"
```
Access to secretsline 236
```
[Credential-related source omitted]
```
Access to secretsline 236
```
[Credential-related source omitted]
```
Access to secretsline 239
```
[Credential-related source omitted]
```
Access to secretsline 239
```
[Credential-related source omitted]
```
Access to secretsline 323
```
[Credential-related source omitted]
```
Access to secretsline 323
```
[Credential-related source omitted]
```

Network accessline 488

For feature requests and bug reports, open an issue at: https://github.com/prompt-security/clawsec/issues

Network accessline 488

For feature requests and bug reports, open an issue at: https://github.com/prompt-security/clawsec/issues

Network accessline 489

https://github.com/prompt-security/clawsec/issues

Network accessline 489

https://github.com/prompt-security/clawsec/issues

Network accessline 499

- **ClawSec Homepage**: https://clawsec.prompt.security

Network accessline 499

- **ClawSec Homepage**: https://clawsec.prompt.security

Network accessline 500

- **Documentation**: https://clawsec.prompt.security/scanner

Network accessline 500

- **Documentation**: https://clawsec.prompt.security/scanner

Network accessline 501

- **GitHub Repository**: https://github.com/prompt-security/clawsec

Network accessline 501

- **GitHub Repository**: https://github.com/prompt-security/clawsec

Network accessline 502

- **OSV API Docs**: https://osv.dev/docs/

Network accessline 502

- **OSV API Docs**: https://osv.dev/docs/

Network accessline 503

- **NVD API Docs**: https://nvd.nist.gov/developers/vulnerabilities

Network accessline 503

- **NVD API Docs**: https://nvd.nist.gov/developers/vulnerabilities

Network accessline 504

- **Semgrep Registry**: https://semgrep.dev/explore

Network accessline 504

- **Semgrep Registry**: https://semgrep.dev/explore

Network accessline 505

- **Bandit Documentation**: https://bandit.readthedocs.io/

Network accessline 505

- **Bandit Documentation**: https://bandit.readthedocs.io/

`skills/clawsec-scanner/hooks/clawsec-scanner-hook/HOOK.md`

Access to secretsline 44
```
[Credential-related source omitted]
```
Access to secretsline 44
```
[Credential-related source omitted]
```

`skills/clawsec-scanner/hooks/clawsec-scanner-hook/handler.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-scanner/lib/report.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-scanner/lib/types.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-scanner/lib/utils.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-scanner/scripts/.gitkeep`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-scanner/scripts/dast_hook_executor.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-scanner/scripts/dast_runner.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-scanner/scripts/query_cve_databases.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

Network accessline 11

*/ export async function queryOSV(packageName, ecosystem, version = undefined) {   const url = 'https://api.osv.dev/v1/query';

Network accessline 11

*/ export async function queryOSV(packageName, ecosystem, version = undefined) {   const url = 'https://api.osv.dev/v1/query';

Network accessline 13

const url = 'https://api.osv.dev/v1/query';

Network accessline 13

const url = 'https://api.osv.dev/v1/query';

Network accessline 30

const response = await globalThis.fetch(url, {

Network accessline 30

const response = await globalThis.fetch(url, {

Access to secretsline 58
```
[Credential-related source omitted]
```
Access to secretsline 58
```
[Credential-related source omitted]
```
Network accessline 64
```
[Credential-related source omitted]
```
Network accessline 64
```
[Credential-related source omitted]
```
Access to secretsline 65
```
[Credential-related source omitted]
```
Access to secretsline 65
```
[Credential-related source omitted]
```

Network accessline 66

const url = `https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=${cveId}`;

Network accessline 66

const url = `https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=${cveId}`;

Network accessline 77

const response = await globalThis.fetch(url, {

Network accessline 77

const response = await globalThis.fetch(url, {

Access to secretsline 120
```
[Credential-related source omitted]
```
Access to secretsline 120
```
[Credential-related source omitted]
```
Access to secretsline 263
```
[Credential-related source omitted]
```
Access to secretsline 263
```
[Credential-related source omitted]
```

`skills/clawsec-scanner/scripts/runner.sh`

Executable scriptline 1
```
#!/usr/bin/env bash
```
Executable scriptline 1
```
#!/usr/bin/env bash
```
Access to secretsline 83
```
[Credential-related source omitted]
```
Access to secretsline 83
```
[Credential-related source omitted]
```
Dangerous shell operationline 120
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```
Dangerous shell operationline 120
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```

`skills/clawsec-scanner/scripts/sast_analyzer.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 242

description: issueText,           references: [             `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, '-')}.html`,

Network accessline 242

description: issueText,           references: [             `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, '-')}.html`,

Network accessline 243

references: [             `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, '-')}.html`,           ],

Network accessline 243

references: [             `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, '-')}.html`,           ],

Network accessline 244

`https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, '-')}.html`,

Network accessline 244

`https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, '-')}.html`,

`skills/clawsec-scanner/scripts/scan_dependencies.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-scanner/scripts/setup_scanner_hook.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-scanner/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/clawsec-scanner/test/cve_integration.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```
Access to secretsline 156
```
[Credential-related source omitted]
```
Access to secretsline 156
```
[Credential-related source omitted]
```
Access to secretsline 185
```
[Credential-related source omitted]
```
Access to secretsline 185
```
[Credential-related source omitted]
```
Access to secretsline 206
```
[Credential-related source omitted]
```
Access to secretsline 206
```
[Credential-related source omitted]
```
Access to secretsline 274
```
[Credential-related source omitted]
```
Access to secretsline 274
```
[Credential-related source omitted]
```
Access to secretsline 294
```
[Credential-related source omitted]
```
Access to secretsline 294
```
[Credential-related source omitted]
```

`skills/clawsec-scanner/test/dast_harness.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-scanner/test/dependency_scanner.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 408

title: "Test Vulnerability",         description: "This is a test vulnerability description",         references: ["https://example.com/cve-2026-1234"],

Network accessline 408

title: "Test Vulnerability",         description: "This is a test vulnerability description",         references: ["https://example.com/cve-2026-1234"],

Network accessline 409

description: "This is a test vulnerability description",         references: ["https://example.com/cve-2026-1234"],         discovered_at: "2026-01-01T00:00:00.000Z",

Network accessline 409

description: "This is a test vulnerability description",         references: ["https://example.com/cve-2026-1234"],         discovered_at: "2026-01-01T00:00:00.000Z",

Network accessline 410

references: ["https://example.com/cve-2026-1234"],

Network accessline 410

references: ["https://example.com/cve-2026-1234"],

`skills/clawsec-scanner/test/lib/test_harness.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-scanner/test/reviewer_regressions.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-scanner/test/sast_engine.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 40

severity: "WARNING",             metadata: {               references: ["https://owasp.org/redos"],

Network accessline 40

severity: "WARNING",             metadata: {               references: ["https://owasp.org/redos"],

Network accessline 41

metadata: {               references: ["https://owasp.org/redos"],               source: "semgrep-rules",

Network accessline 41

metadata: {               references: ["https://owasp.org/redos"],               source: "semgrep-rules",

Network accessline 42

references: ["https://owasp.org/redos"],

Network accessline 42

references: ["https://owasp.org/redos"],

Network accessline 308

title: "Potential ReDoS vulnerability detected",       description: "Potential ReDoS vulnerability detected",       references: ["https://owasp.org/redos", "semgrep-rules"],

Network accessline 308

title: "Potential ReDoS vulnerability detected",       description: "Potential ReDoS vulnerability detected",       references: ["https://owasp.org/redos", "semgrep-rules"],

Network accessline 309

description: "Potential ReDoS vulnerability detected",       references: ["https://owasp.org/redos", "semgrep-rules"],       discovered_at: getTimestamp(),

Network accessline 309

description: "Potential ReDoS vulnerability detected",       references: ["https://owasp.org/redos", "semgrep-rules"],       discovered_at: getTimestamp(),

Network accessline 310

references: ["https://owasp.org/redos", "semgrep-rules"],

Network accessline 310

references: ["https://owasp.org/redos", "semgrep-rules"],

Network accessline 348

title: "A possibly insecure use of pickle detected.",       description: "A possibly insecure use of pickle detected.",       references: ["https://bandit.readthedocs.io/en/latest/plugins/b201.html"],

Network accessline 348

title: "A possibly insecure use of pickle detected.",       description: "A possibly insecure use of pickle detected.",       references: ["https://bandit.readthedocs.io/en/latest/plugins/b201.html"],

Network accessline 349

description: "A possibly insecure use of pickle detected.",       references: ["https://bandit.readthedocs.io/en/latest/plugins/b201.html"],       discovered_at: getTimestamp(),

Network accessline 349

description: "A possibly insecure use of pickle detected.",       references: ["https://bandit.readthedocs.io/en/latest/plugins/b201.html"],       discovered_at: getTimestamp(),

Network accessline 350

references: ["https://bandit.readthedocs.io/en/latest/plugins/b201.html"],

Network accessline 350

references: ["https://bandit.readthedocs.io/en/latest/plugins/b201.html"],

Network accessline 466

const testId = "B201";     const banditRef = `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, "-")}.html`;

Network accessline 466

const testId = "B201";     const banditRef = `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, "-")}.html`;

Network accessline 467

const banditRef = `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, "-")}.html`;

Network accessline 467

const banditRef = `https://bandit.readthedocs.io/en/latest/plugins/${testId.toLowerCase().replace(/_/g, "-")}.html`;

Network accessline 470

const expectedRef = "https://bandit.readthedocs.io/en/latest/plugins/b201.html";

Network accessline 470

const expectedRef = "https://bandit.readthedocs.io/en/latest/plugins/b201.html";

`skills/clawsec-suite/.clawhubignore`

Access to secretsline 10
```
[Credential-related source omitted]
```
Access to secretsline 10
```
[Credential-related source omitted]
```

`skills/clawsec-suite/CHANGELOG.md`

Network accessline 68

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 68

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 69

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 69

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 120

- Fixed heartbeat update detection to rely on GitHub release metadata for latest-version resolution, addressing false update status results reported in [#168](https://github.com/prompt-security/clawsec/issues/168).

Network accessline 120

- Fixed heartbeat update detection to rely on GitHub release metadata for latest-version resolution, addressing false update status results reported in [#168](https://github.com/prompt-security/clawsec/issues/168).

Network accessline 142

- Contributor credit: portability and path-hardening improvements in this release were contributed by [@aldodelgado](https://github.com/aldodelgado) in PR #62.

Network accessline 142

- Contributor credit: portability and path-hardening improvements in this release were contributed by [@aldodelgado](https://github.com/aldodelgado) in PR #62.

Network accessline 185

### Added - Added `scripts/discover_skill_catalog.mjs` to dynamically discover installable skills from `https://clawsec.prompt.security/skills/index.json`.

Network accessline 185

### Added - Added `scripts/discover_skill_catalog.mjs` to dynamically discover installable skills from `https://clawsec.prompt.security/skills/index.json`.

Network accessline 186

- Added `scripts/discover_skill_catalog.mjs` to dynamically discover installable skills from `https://clawsec.prompt.security/skills/index.json`.

Network accessline 186

- Added `scripts/discover_skill_catalog.mjs` to dynamically discover installable skills from `https://clawsec.prompt.security/skills/index.json`.

Network accessline 190

### Changed - Updated `SKILL.md` to use dynamic catalog discovery commands instead of hard-coded optional-skill names. - Updated advisory feed defaults to signed-host URL (`https://clawsec.prompt.security/advisories/feed.json`).

Network accessline 190

### Changed - Updated `SKILL.md` to use dynamic catalog discovery commands instead of hard-coded optional-skill names. - Updated advisory feed defaults to signed-host URL (`https://clawsec.prompt.security/advisories/feed.json`).

Network accessline 191

- Updated `SKILL.md` to use dynamic catalog discovery commands instead of hard-coded optional-skill names. - Updated advisory feed defaults to signed-host URL (`https://clawsec.prompt.security/advisories/feed.json`). - Improved checksum man

Network accessline 191

- Updated `SKILL.md` to use dynamic catalog discovery commands instead of hard-coded optional-skill names. - Updated advisory feed defaults to signed-host URL (`https://clawsec.prompt.security/advisories/feed.json`). - Improved checksum man

Network accessline 192

- Updated advisory feed defaults to signed-host URL (`https://clawsec.prompt.security/advisories/feed.json`).

Network accessline 192

- Updated advisory feed defaults to signed-host URL (`https://clawsec.prompt.security/advisories/feed.json`).

`skills/clawsec-suite/HEARTBEAT.md`

Network accessline 16

INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.openclaw/skills}" SUITE_DIR="$INSTALL_ROOT/clawsec-suite" GITHUB_RELEASES_API="${GITHUB_RELEASES_API:-https://api.github.com/repos/prompt-security/clawsec/releases?per_page=100}"

Network accessline 16

INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.openclaw/skills}" SUITE_DIR="$INSTALL_ROOT/clawsec-suite" GITHUB_RELEASES_API="${GITHUB_RELEASES_API:-https://api.github.com/repos/prompt-security/clawsec/releases?per_page=100}"

Network accessline 17

SUITE_DIR="$INSTALL_ROOT/clawsec-suite" GITHUB_RELEASES_API="${GITHUB_RELEASES_API:-https://api.github.com/repos/prompt-security/clawsec/releases?per_page=100}" RELEASE_DOWNLOAD_BASE_URL="${RELEASE_DOWNLOAD_BASE_URL:-https://github.com/prom

Network accessline 17

SUITE_DIR="$INSTALL_ROOT/clawsec-suite" GITHUB_RELEASES_API="${GITHUB_RELEASES_API:-https://api.github.com/repos/prompt-security/clawsec/releases?per_page=100}" RELEASE_DOWNLOAD_BASE_URL="${RELEASE_DOWNLOAD_BASE_URL:-https://github.com/prom

Network accessline 18

GITHUB_RELEASES_API="${GITHUB_RELEASES_API:-https://api.github.com/repos/prompt-security/clawsec/releases?per_page=100}" RELEASE_DOWNLOAD_BASE_URL="${RELEASE_DOWNLOAD_BASE_URL:-https://github.com/prompt-security/clawsec/releases/download}"

Network accessline 18

GITHUB_RELEASES_API="${GITHUB_RELEASES_API:-https://api.github.com/repos/prompt-security/clawsec/releases?per_page=100}" RELEASE_DOWNLOAD_BASE_URL="${RELEASE_DOWNLOAD_BASE_URL:-https://github.com/prompt-security/clawsec/releases/download}"

Network accessline 19

RELEASE_DOWNLOAD_BASE_URL="${RELEASE_DOWNLOAD_BASE_URL:-https://github.com/prompt-security/clawsec/releases/download}"

Network accessline 19

RELEASE_DOWNLOAD_BASE_URL="${RELEASE_DOWNLOAD_BASE_URL:-https://github.com/prompt-security/clawsec/releases/download}"

Network accessline 20

FEED_URL="${CLAWSEC_FEED_URL:-https://clawsec.prompt.security/advisories/feed.json}"

Network accessline 20

FEED_URL="${CLAWSEC_FEED_URL:-https://clawsec.prompt.security/advisories/feed.json}"

Dangerous shell operationline 46
```
trap 'rm -rf "$TMP"' EXIT
```
Dangerous shell operationline 46
```
trap 'rm -rf "$TMP"' EXIT
```

Network accessline 52

if curl -fsSLo "$TMP/releases.json" "$GITHUB_RELEASES_API"; then

Network accessline 52

if curl -fsSLo "$TMP/releases.json" "$GITHUB_RELEASES_API"; then

Network accessline 56

if [ -n "$LATEST_TAG" ]; then   if curl -fsSLo "$TMP/remote-skill.json" "$RELEASE_DOWNLOAD_BASE_URL/$LATEST_TAG/skill.json"; then

Network accessline 56

if [ -n "$LATEST_TAG" ]; then   if curl -fsSLo "$TMP/remote-skill.json" "$RELEASE_DOWNLOAD_BASE_URL/$LATEST_TAG/skill.json"; then

Network accessline 57

if curl -fsSLo "$TMP/remote-skill.json" "$RELEASE_DOWNLOAD_BASE_URL/$LATEST_TAG/skill.json"; then

Network accessline 57

if curl -fsSLo "$TMP/remote-skill.json" "$RELEASE_DOWNLOAD_BASE_URL/$LATEST_TAG/skill.json"; then

Network accessline 109

if ! curl -fsSLo "$FEED_TMP" "$FEED_URL"; then

Network accessline 109

if ! curl -fsSLo "$FEED_TMP" "$FEED_URL"; then

`skills/clawsec-suite/SKILL.md`

Network accessline 3

version: 0.1.16 description: ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills. homepage: https://cla

Network accessline 3

version: 0.1.16 description: ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills. homepage: https://cla

Network accessline 3

version: 0.1.16 description: ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills. homepage: https://cla

Network accessline 4

description: ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills. homepage: https://clawsec.prompt.secu

Network accessline 4

description: ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills. homepage: https://clawsec.prompt.secu

Network accessline 4

description: ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills. homepage: https://clawsec.prompt.secu

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 50

Discover the current catalog from the authoritative index (`https://clawsec.prompt.security/skills/index.json`) at runtime:

Network accessline 50

Discover the current catalog from the authoritative index (`https://clawsec.prompt.security/skills/index.json`) at runtime:

Network accessline 50

Discover the current catalog from the authoritative index (`https://clawsec.prompt.security/skills/index.json`) at runtime:

Network accessline 83

INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.openclaw/skills}" DEST="$INSTALL_ROOT/clawsec-suite" BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v${VERSION}"

Network accessline 83

INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.openclaw/skills}" DEST="$INSTALL_ROOT/clawsec-suite" BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v${VERSION}"

Network accessline 83

INSTALL_ROOT="${INSTALL_ROOT:-$HOME/.openclaw/skills}" DEST="$INSTALL_ROOT/clawsec-suite" BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v${VERSION}"

Network accessline 85

BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v${VERSION}"

Network accessline 85

BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v${VERSION}"

Network accessline 85

BASE="https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v${VERSION}"

Dangerous shell operationline 88
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```
Dangerous shell operationline 88
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```
Dangerous shell operationline 88
```
trap 'rm -rf "$TEMP_DIR"' EXIT
```

Network accessline 107

# 1) Download release archive + signed checksums manifest + signing public key curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 107

# 1) Download release archive + signed checksums manifest + signing public key curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 107

# 1) Download release archive + signed checksums manifest + signing public key curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 108

curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 108

curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 108

curl -fsSL "$BASE/$ZIP_NAME" -o "$TEMP_DIR/$ZIP_NAME"

Network accessline 109

curl -fsSL "$BASE/checksums.json" -o "$TEMP_DIR/checksums.json"

Network accessline 109

curl -fsSL "$BASE/checksums.json" -o "$TEMP_DIR/checksums.json"

Network accessline 109

curl -fsSL "$BASE/checksums.json" -o "$TEMP_DIR/checksums.json"

Network accessline 110

curl -fsSL "$BASE/checksums.sig" -o "$TEMP_DIR/checksums.sig"

Network accessline 110

curl -fsSL "$BASE/checksums.sig" -o "$TEMP_DIR/checksums.sig"

Network accessline 110

curl -fsSL "$BASE/checksums.sig" -o "$TEMP_DIR/checksums.sig"

Dangerous shell operationline 145
```
rm -rf "$DEST"
```
Dangerous shell operationline 145
```
rm -rf "$DEST"
```
Dangerous shell operationline 145
```
rm -rf "$DEST"
```

Network accessline 211

- Remote consolidated feed URL: `https://clawsec.prompt.security/advisories/feed.json`

Network accessline 211

- Remote consolidated feed URL: `https://clawsec.prompt.security/advisories/feed.json`

Network accessline 211

- Remote consolidated feed URL: `https://clawsec.prompt.security/advisories/feed.json`

Network accessline 227

FEED_URL="${CLAWSEC_FEED_URL:-https://clawsec.prompt.security/advisories/feed.json}"

Network accessline 227

FEED_URL="${CLAWSEC_FEED_URL:-https://clawsec.prompt.security/advisories/feed.json}"

Network accessline 227

FEED_URL="${CLAWSEC_FEED_URL:-https://clawsec.prompt.security/advisories/feed.json}"

Dangerous shell operationline 231
```
trap 'rm -rf "$TMP"' EXIT
```
Dangerous shell operationline 231
```
trap 'rm -rf "$TMP"' EXIT
```
Dangerous shell operationline 231
```
trap 'rm -rf "$TMP"' EXIT
```

Network accessline 233

if ! curl -fsSLo "$TMP/feed.json" "$FEED_URL"; then

Network accessline 233

if ! curl -fsSLo "$TMP/feed.json" "$FEED_URL"; then

Network accessline 233

if ! curl -fsSLo "$TMP/feed.json" "$FEED_URL"; then

`skills/clawsec-suite/advisories/feed.json`

Network accessline 20

"published": "2026-10-14T21:17:36.433",       "references": [         "https://github.com/nedlir/skills-scanner-bypass",

Network accessline 20

"published": "2026-10-14T21:17:36.433",       "references": [         "https://github.com/nedlir/skills-scanner-bypass",

Network accessline 21

"references": [         "https://github.com/nedlir/skills-scanner-bypass",         "https://github.com/openclaw/clawscan/",

Network accessline 21

"references": [         "https://github.com/nedlir/skills-scanner-bypass",         "https://github.com/openclaw/clawscan/",

Network accessline 22

"https://github.com/nedlir/skills-scanner-bypass",

Network accessline 22

"https://github.com/nedlir/skills-scanner-bypass",

Network accessline 23

"https://github.com/openclaw/clawscan/",

Network accessline 23

"https://github.com/openclaw/clawscan/",

Network accessline 24

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa"

Network accessline 24

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa"

Network accessline 25

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 25

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 26

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",       "exploitability_score": "medium",

Network accessline 26

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",       "exploitability_score": "medium",

Network accessline 27

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 27

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110689",

Network accessline 50

"nvd_category_id": "CWE-59",       "title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's

Network accessline 50

"nvd_category_id": "CWE-59",       "title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's

Network accessline 51

"title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused th

Network accessline 51

"title": "Session inbox directory was not checked again between the attachments of one message",       "description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused th

Network accessline 52

"description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused that result for every file in the message. The agent's container can write to its own session folder and

Network accessline 52

"description": "Impact When a message arrived with several attachments, the host checked the session's inbox directory once and reused that result for every file in the message. The agent's container can write to its own session folder and

Network accessline 62

"updated": "2026-10-13T17:35:58Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 62

"updated": "2026-10-13T17:35:58Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 63

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"       ],

Network accessline 63

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"       ],

Network accessline 64

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 64

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364"

Network accessline 66

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 66

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 67

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",       "nvd_url": null,

Network accessline 67

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",       "nvd_url": null,

Network accessline 68

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 68

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-vwj5-j44r-v364",

Network accessline 93

"nvd_category_id": "CWE-22",       "title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given.

Network accessline 93

"nvd_category_id": "CWE-22",       "title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given.

Network accessline 94

"title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given. A value that pointed outside the g

Network accessline 94

"title": "ncl groups create accepted a folder value outside the groups directory",       "description": "Impact In NanoClaw 2.2.0 and earlier, ncl groups create did not check the folder value it was given. A value that pointed outside the g

Network accessline 95
```
[Credential-related source omitted]
```
Network accessline 95
```
[Credential-related source omitted]
```
Access to secretsline 95
```
[Credential-related source omitted]
```
Access to secretsline 95
```
[Credential-related source omitted]
```

Network accessline 105

"updated": "2026-10-13T17:34:07Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 105

"updated": "2026-10-13T17:34:07Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 106

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"       ],

Network accessline 106

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"       ],

Network accessline 107

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 107

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8"

Network accessline 109

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 109

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 110

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",       "nvd_url": null,

Network accessline 110

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",       "nvd_url": null,

Network accessline 111

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 111

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-hcfx-vmj7-xcx8",

Network accessline 135

"nvd_category_id": "CWE-436",       "title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent in

Network accessline 135

"nvd_category_id": "CWE-436",       "title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent in

Network accessline 136

"title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it use

Network accessline 136

"title": "Group-scoped agents could read other agent groups through ncl argument spellings",       "description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it use

Network accessline 137

"description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it uses ncl. The check that enforces this read the arguments as the agent sent them. The command itself r

Network accessline 137

"description": "Impact An agent group's CLI scope (cliscope, default group) is meant to keep its agent inside its own agent group when it uses ncl. The check that enforces this read the arguments as the agent sent them. The command itself r

Network accessline 149

"updated": "2026-10-13T17:33:48Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 149

"updated": "2026-10-13T17:33:48Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 150

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"       ],

Network accessline 150

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"       ],

Network accessline 151

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 151

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf"

Network accessline 153

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 153

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 154

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",       "nvd_url": null,

Network accessline 154

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",       "nvd_url": null,

Network accessline 155

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 155

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-r7fr-2v6h-rhqf",

Network accessline 180

"nvd_category_id": "CWE-436",       "title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the ag

Network accessline 180

"nvd_category_id": "CWE-436",       "title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the ag

Network accessline 181

"title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's

Network accessline 181

"title": "Non-admin group members could run /clear and /upload-trace by adding a suffix",       "description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's

Network accessline 182

"description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's first word exactly, but the agent's container matched /clear and /upload-trace by how the word s

Network accessline 182

"description": "Impact NanoClaw checks admin-only slash commands on the host before a message reaches the agent. The host matched the command's first word exactly, but the agent's container matched /clear and /upload-trace by how the word s

Network accessline 194

"updated": "2026-10-13T17:33:25Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 194

"updated": "2026-10-13T17:33:25Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 195

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"       ],

Network accessline 195

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"       ],

Network accessline 196

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 196

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g"

Network accessline 198

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 198

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 199

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",       "nvd_url": null,

Network accessline 199

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",       "nvd_url": null,

Network accessline 200

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 200

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-g3gp-6777-8p9g",

Network accessline 225

"nvd_category_id": "CWE-78",       "title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker

Network accessline 225

"nvd_category_id": "CWE-78",       "title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker

Network accessline 226

"title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP serve

Network accessline 226

"title": "Mattermost setup used a server-supplied user ID in a setup command without checking it",       "description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP serve

Network accessline 227

"description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP server with an attacker on the network path. Installs that use a trusted server over HTTPS, or their own serve

Network accessline 227

"description": "Impact Exploitation requires connecting NanoClaw to a Mattermost server the attacker controls, or to a plain-HTTP server with an attacker on the network path. Installs that use a trusted server over HTTPS, or their own serve

Network accessline 239

"updated": "2026-10-13T17:32:59Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 239

"updated": "2026-10-13T17:32:59Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 240

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"       ],

Network accessline 240

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"       ],

Network accessline 241

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 241

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w"

Network accessline 243

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 243

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 244

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",       "nvd_url": null,

Network accessline 244

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",       "nvd_url": null,

Network accessline 245

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 245

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-8w49-2gv4-3x6w",

Network accessline 269

"nvd_category_id": "CWE-494",       "title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://.

Network accessline 269

"nvd_category_id": "CWE-494",       "title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://.

Network accessline 270

"title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP,

Network accessline 270

"title": "OneCLI setup downloaded its installer over plain HTTP and ran it",       "description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP,

Network accessline 271

"description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP, and setup ran the script in a shell as the user running setup. Someone who could in

Network accessline 271

"description": "Impact NanoClaw's OneCLI setup step downloaded the OneCLI installer from an address that had no https://. The download went over plain HTTP, and setup ran the script in a shell as the user running setup. Someone who could in

Network accessline 283

"updated": "2026-10-13T17:32:37Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 283

"updated": "2026-10-13T17:32:37Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 284

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"       ],

Network accessline 284

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"       ],

Network accessline 285

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 285

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9"

Network accessline 287

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 287

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 288

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",       "nvd_url": null,

Network accessline 288

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",       "nvd_url": null,

Network accessline 289

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 289

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-628g-jj3x-6mp9",

Network accessline 313

"nvd_category_id": "CWE-22",       "title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the tas

Network accessline 313

"nvd_category_id": "CWE-22",       "title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the tas

Network accessline 314

"title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the

Network accessline 314

"title": "Task run-log read built a host file path from a series id without checking it",       "description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the

Network accessline 315

"description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the character check that the functions for adding to and deleting the same log already applied. A s

Network accessline 315

"description": "Impact The host function that reads a scheduled task's run log built a file path from the task's series id. It did not apply the character check that the functions for adding to and deleting the same log already applied. A s

Network accessline 327

"updated": "2026-10-13T17:30:15Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 327

"updated": "2026-10-13T17:30:15Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 328

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"       ],

Network accessline 328

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"       ],

Network accessline 329

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 329

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896"

Network accessline 331

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 331

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 332

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",       "nvd_url": null,

Network accessline 332

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",       "nvd_url": null,

Network accessline 333

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 333

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-9j3v-9hwg-v896",

Network accessline 357

"nvd_category_id": "CWE-59",       "title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's in

Network accessline 357

"nvd_category_id": "CWE-59",       "title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's in

Network accessline 358

"title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the fi

Network accessline 358

"title": "Race between the check and the write when saving inbound attachments to the session inbox",       "description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the fi

Network accessline 359

"description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the files in a separate step. The agent's container can write to its own session folder and runs at the same time

Network accessline 359

"description": "Impact When a message arrived with attachments, the host checked the session's inbox directory and then wrote the files in a separate step. The agent's container can write to its own session folder and runs at the same time

Network accessline 369

"updated": "2026-10-13T17:23:42Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 369

"updated": "2026-10-13T17:23:42Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 370

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"       ],

Network accessline 370

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"       ],

Network accessline 371

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 371

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp"

Network accessline 373

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 373

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 374

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",       "nvd_url": null,

Network accessline 374

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",       "nvd_url": null,

Network accessline 375

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 375

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-7wx5-9p7v-wvhp",

Network accessline 400

"nvd_category_id": "CWE-59",       "title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its contain

Network accessline 400

"nvd_category_id": "CWE-59",       "title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its contain

Network accessline 401

"title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code tha

Network accessline 401

"title": "Host followed symlinks in agent-writable session and skill directories",       "description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code tha

Network accessline 402

"description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code that worked inside those folders followed directory names that the agent could replace with

Network accessline 402

"description": "Impact NanoClaw mounts each agent's session folder, group folder and provider state into its container with write access. Host code that worked inside those folders followed directory names that the agent could replace with

Network accessline 412

"updated": "2026-10-13T17:19:18Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 412

"updated": "2026-10-13T17:19:18Z",       "references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 413

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"       ],

Network accessline 413

"references": [         "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"       ],

Network accessline 414

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 414

"https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq"

Network accessline 416

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 416

"source": "GitHub Security Advisory",       "repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 417

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",       "nvd_url": null,

Network accessline 417

"repository": "qwibitai/nanoclaw",       "github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",       "nvd_url": null,

Network accessline 418

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 418

"github_advisory_url": "https://github.com/nanocoai/nanoclaw/security/advisories/GHSA-frvf-5rf5-89fq",

Network accessline 448

"published": "2026-10-11T13:17:20.840",       "references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 448

"published": "2026-10-11T13:17:20.840",       "references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 449

"references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c

Network accessline 449

"references": [         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",         "https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c

Network accessline 450

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 450

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/http-router.ts#L296-L330",

Network accessline 451

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/server.ts#L149",

Network accessline 451

"https://github.com/Nexting-ai/nexting/blob/a4b75f0429d3b1bf35eef68a296b2e72aa9c7483/plugin/src/core/server.ts#L149",

Network accessline 452

"https://hackmd.io/@haind/nexting-pinclaw-send-unauth-agent-injection"

Network accessline 452

"https://hackmd.io/@haind/nexting-pinclaw-send-unauth-agent-injection"

Network accessline 453

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 453

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 454

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",       "exploitability_score": "high",

Network accessline 454

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",       "exploitability_score": "high",

Network accessline 455

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 455

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108757",

Network accessline 489

"published": "2026-10-09T17:16:46.540",       "references": [         "https://github.com/netease-youdao/LobsterAI",

Network accessline 489

"published": "2026-10-09T17:16:46.540",       "references": [         "https://github.com/netease-youdao/LobsterAI",

Network accessline 490

"references": [         "https://github.com/netease-youdao/LobsterAI",         "https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 490

"references": [         "https://github.com/netease-youdao/LobsterAI",         "https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 491

"https://github.com/netease-youdao/LobsterAI",

Network accessline 491

"https://github.com/netease-youdao/LobsterAI",

Network accessline 492

"https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 492

"https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts#L60-L78",

Network accessline 493

"https://github.com/netease-youdao/LobsterAI/commit/82fdfe10d1b85d0ff734aa720e18c866b4be2406"

Network accessline 493

"https://github.com/netease-youdao/LobsterAI/commit/82fdfe10d1b85d0ff734aa720e18c866b4be2406"

Network accessline 494

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 494

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 495

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",       "exploitability_score": "high",

Network accessline 495

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",       "exploitability_score": "high",

Network accessline 496

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 496

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108156",

Network accessline 524

"published": "2026-09-30T20:17:20.663",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 524

"published": "2026-09-30T20:17:20.663",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 525

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",         "https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a

Network accessline 525

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",         "https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a

Network accessline 526

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 526

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50",

Network accessline 527

"https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a38f6",

Network accessline 527

"https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a38f6",

Network accessline 528

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 528

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 529

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 529

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 530

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",       "exploitability_score": "high",

Network accessline 530

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",       "exploitability_score": "high",

Network accessline 531

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 531

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101884",

Network accessline 559

"published": "2026-09-30T20:17:20.197",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 559

"published": "2026-09-30T20:17:20.197",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 560

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.T

Network accessline 560

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.T

Network accessline 561

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 561

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Tray.WinUI/Windows/CanvasWindow.xaml.cs#L77-L109",

Network accessline 562

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1244-L1270",

Network accessline 562

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.9.4/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1244-L1270",

Network accessline 563

"https://github.com/openclaw/openclaw-windows-node/commit/16528aadaa45d7bc6718b07ccf8b01f3eb033ad1"

Network accessline 563

"https://github.com/openclaw/openclaw-windows-node/commit/16528aadaa45d7bc6718b07ccf8b01f3eb033ad1"

Network accessline 564

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",

Network accessline 564

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",

Network accessline 565

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",

Network accessline 565

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",

Network accessline 566

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 566

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101883",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 594

"published": "2026-09-30T20:17:19.790",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 594

"published": "2026-09-30T20:17:19.790",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 595

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",         "https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228

Network accessline 595

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",         "https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228

Network accessline 596

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 596

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/Capabilities/SystemCapability.cs#L791-L853",

Network accessline 597

"https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228c0b07093173a043a656",

Network accessline 597

"https://github.com/openclaw/openclaw-windows-node/commit/8f07ad92beb28376bc228c0b07093173a043a656",

Network accessline 598

"https://github.com/openclaw/openclaw-windows-node/commit/988df5badc84ab5efd5b4e291766a1fa5e7e268a"

Network accessline 598

"https://github.com/openclaw/openclaw-windows-node/commit/988df5badc84ab5efd5b4e291766a1fa5e7e268a"

Network accessline 599

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 599

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 600

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",       "exploitability_score": "high",

Network accessline 600

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",       "exploitability_score": "high",

Network accessline 601

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 601

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101882",

Network accessline 629

"published": "2026-09-30T20:17:19.330",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 629

"published": "2026-09-30T20:17:19.330",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 630

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",         "https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746b

Network accessline 630

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",         "https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746b

Network accessline 631

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 631

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/WebSocketClientBase.cs#L217-L263",

Network accessline 632

"https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746ba7d31512a",

Network accessline 632

"https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b347f31c746ba7d31512a",

Network accessline 633

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 633

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 634

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 634

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 635

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",       "exploitability_score": "high",

Network accessline 635

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",       "exploitability_score": "high",

Network accessline 636

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 636

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101881",

Network accessline 664

"published": "2026-09-30T20:17:18.857",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 664

"published": "2026-09-30T20:17:18.857",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 665

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",         "https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604

Network accessline 665

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",         "https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604

Network accessline 666

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 666

"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecShellWrapperParser.cs#L253",

Network accessline 667

"https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e",

Network accessline 667

"https://github.com/openclaw/openclaw-windows-node/commit/2077aa3e7159101bddcee2f4efcb9d604a81619e",

Network accessline 668

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 668

"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1"

Network accessline 669

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 669

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 670

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",       "exploitability_score": "high",

Network accessline 670

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",       "exploitability_score": "high",

Network accessline 671

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 671

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101880",

Network accessline 699

"published": "2026-09-30T20:17:18.373",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 699

"published": "2026-09-30T20:17:18.373",       "references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 700

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",         "https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2

Network accessline 700

"references": [         "https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",         "https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2

Network accessline 701

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 701

"https://github.com/openclaw/openclaw-windows-node/blob/v2026.7.1-2/src/OpenClaw.Tray.WinUI/Services/NodeService.cs#L1891-L1913",

Network accessline 702

"https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2811e9d550caed9a49b4b",

Network accessline 702

"https://github.com/openclaw/openclaw-windows-node/commit/16cb6897941fa7832ce2811e9d550caed9a49b4b",

Network accessline 703

"https://github.com/openclaw/openclaw-windows-node/commit/31a8c6557df740232898079b21f0eb677a4119cf"

Network accessline 703

"https://github.com/openclaw/openclaw-windows-node/commit/31a8c6557df740232898079b21f0eb677a4119cf"

Network accessline 704

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 704

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 705

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",       "exploitability_score": "medium",

Network accessline 705

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",       "exploitability_score": "medium",

Network accessline 706

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 706

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101879",

Network accessline 734

"published": "2026-09-29T18:17:13.893",       "references": [         "https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 734

"published": "2026-09-29T18:17:13.893",       "references": [         "https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 735

"references": [         "https://docs.openclaw.ai/releases/2026.9.4",         "https://github.com/openclaw/openclaw",

Network accessline 735

"references": [         "https://docs.openclaw.ai/releases/2026.9.4",         "https://github.com/openclaw/openclaw",

Network accessline 736

"https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 736

"https://docs.openclaw.ai/releases/2026.9.4",

Network accessline 737
```
"https://github.com/openclaw/openclaw",
```
Network accessline 737
```
"https://github.com/openclaw/openclaw",
```

Network accessline 738

"https://github.com/openclaw/openclaw/blob/1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7/src/gateway/mcp-app-standalone.ts#L209-L215"

Network accessline 738

"https://github.com/openclaw/openclaw/blob/1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7/src/gateway/mcp-app-standalone.ts#L209-L215"

Network accessline 739

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 739

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 740

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",       "exploitability_score": "medium",

Network accessline 740

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",       "exploitability_score": "medium",

Network accessline 741

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 741

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102807",

Network accessline 769

"published": "2026-09-29T18:17:13.730",       "references": [         "https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 769

"published": "2026-09-29T18:17:13.730",       "references": [         "https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 770

"references": [         "https://docs.openclaw.ai/releases/2026.9.5",         "https://github.com/openclaw/openclaw",

Network accessline 770

"references": [         "https://docs.openclaw.ai/releases/2026.9.5",         "https://github.com/openclaw/openclaw",

Network accessline 771

"https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 771

"https://docs.openclaw.ai/releases/2026.9.5",

Network accessline 772
```
"https://github.com/openclaw/openclaw",
```
Network accessline 772
```
"https://github.com/openclaw/openclaw",
```

Network accessline 773

"https://github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-understanding/runner.attachments.ts#L40-L50"

Network accessline 773

"https://github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-understanding/runner.attachments.ts#L40-L50"

Network accessline 774

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 774

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 775

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",       "exploitability_score": "medium",

Network accessline 775

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",       "exploitability_score": "medium",

Network accessline 776

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 776

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102806",

Network accessline 804

"published": "2026-09-26T14:16:40.473",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 804

"published": "2026-09-26T14:16:40.473",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 805

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 805

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 806

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 806

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 807

"https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 807

"https://github.com/openclaw/clawhub/security/advisories/GHSA-9558-q4f9-324f",

Network accessline 808

"https://www.vulncheck.com/advisories/clawhub-authentication-bypass-via-former-publisher-skill-control"

Network accessline 808

"https://www.vulncheck.com/advisories/clawhub-authentication-bypass-via-former-publisher-skill-control"

Network accessline 809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",       "exploitability_score": "medium",

Network accessline 810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",       "exploitability_score": "medium",

Network accessline 811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100604",

Network accessline 839

"published": "2026-09-26T14:16:40.330",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 839

"published": "2026-09-26T14:16:40.330",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 840

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 840

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 841

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 841

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 842

"https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 842

"https://github.com/openclaw/clawhub/security/advisories/GHSA-5jj4-m8c9-gwcq",

Network accessline 843

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-skill-hiding-via-coordinated-reports"

Network accessline 843

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-skill-hiding-via-coordinated-reports"

Network accessline 844

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 844

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 845

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",       "exploitability_score": "medium",

Network accessline 845

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",       "exploitability_score": "medium",

Network accessline 846

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 846

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100603",

Network accessline 874

"published": "2026-09-26T14:16:40.187",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 874

"published": "2026-09-26T14:16:40.187",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 875

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 875

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 876

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 876

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 877

"https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 877

"https://github.com/openclaw/clawhub/security/advisories/GHSA-g3jp-jj55-jrcr",

Network accessline 878

"https://www.vulncheck.com/advisories/clawhub-changelog-preview-information-disclosure-via-authorization-bypass"

Network accessline 878

"https://www.vulncheck.com/advisories/clawhub-changelog-preview-information-disclosure-via-authorization-bypass"

Network accessline 879

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 879

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 880

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",       "exploitability_score": "high",

Network accessline 880

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",       "exploitability_score": "high",

Network accessline 881

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 881

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100602",

Network accessline 909

"published": "2026-09-26T14:16:40.040",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 909

"published": "2026-09-26T14:16:40.040",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 910

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 910

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 911

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 911

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 912

"https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 912

"https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm",

Network accessline 913

"https://www.vulncheck.com/advisories/clawhub-ssrf-via-unchecked-dns-resolution-in-profile-image"

Network accessline 913

"https://www.vulncheck.com/advisories/clawhub-ssrf-via-unchecked-dns-resolution-in-profile-image"

Network accessline 914

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",

Network accessline 914

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",

Network accessline 915

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",

Network accessline 915

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",

Network accessline 916

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.3); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 916

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100601",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.3); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 944

"published": "2026-09-26T14:16:39.420",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 944

"published": "2026-09-26T14:16:39.420",       "references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 945

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 945

"references": [         "https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",         "https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 946

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 946

"https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650",

Network accessline 947

"https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 947

"https://github.com/openclaw/clawhub/security/advisories/GHSA-4c7q-g7xf-5628",

Network accessline 948

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-quota-exhaustion-via-anonymous-api"

Network accessline 948

"https://www.vulncheck.com/advisories/clawhub-before-8c2de6c506-quota-exhaustion-via-anonymous-api"

Network accessline 949

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 949

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 950

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",       "exploitability_score": "high",

Network accessline 950

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",       "exploitability_score": "high",

Network accessline 951

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 951

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100600",

Network accessline 979

"published": "2026-09-26T03:17:08.667",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 979

"published": "2026-09-26T03:17:08.667",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 980

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",         "https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 980

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",         "https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 981

"https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 981

"https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c",

Network accessline 982

"https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 982

"https://www.vulncheck.com/advisories/openclaw-2026.5.1-before-2026.7.1-remote-code-execution-via-googlemeet-chrome"

Network accessline 983

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 983

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 984

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",       "exploitability_score": "high",

Network accessline 984

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",       "exploitability_score": "high",

Network accessline 985

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 985

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100599",

Network accessline 1013

"published": "2026-09-26T03:17:08.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1013

"published": "2026-09-26T03:17:08.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf",

Network accessline 1016

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1016

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-approval-binding-logic-error"

Network accessline 1017

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1017

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1018

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",       "exploitability_score": "high",

Network accessline 1018

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",       "exploitability_score": "high",

Network accessline 1019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100598",

Network accessline 1047

"published": "2026-09-26T03:17:08.337",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1047

"published": "2026-09-26T03:17:08.337",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1048

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1048

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1049

"https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1049

"https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5",

Network accessline 1050

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1050

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-path-traversal-via-filesystem-race"

Network accessline 1051

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1051

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1052

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",       "exploitability_score": "medium",

Network accessline 1052

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",       "exploitability_score": "medium",

Network accessline 1053

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1053

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100597",

Network accessline 1081

"published": "2026-09-26T03:17:08.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1081

"published": "2026-09-26T03:17:08.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1082

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1082

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1083

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1083

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc",

Network accessline 1084

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1084

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-mcp-configuration"

Network accessline 1085

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1085

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1086

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",       "exploitability_score": "high",

Network accessline 1086

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",       "exploitability_score": "high",

Network accessline 1087

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1087

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100596",

Network accessline 1115

"published": "2026-09-26T03:17:08.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1115

"published": "2026-09-26T03:17:08.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1116

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1116

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1117

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1117

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp",

Network accessline 1118

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1118

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-diagnostics"

Network accessline 1119

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1119

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1120

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",       "exploitability_score": "medium",

Network accessline 1120

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",       "exploitability_score": "medium",

Network accessline 1121

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1121

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100595",

Network accessline 1149

"published": "2026-09-26T03:17:07.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1149

"published": "2026-09-26T03:17:07.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1150

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1150

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1151

"https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1151

"https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf",

Network accessline 1152

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1152

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-trajectory-export"

Network accessline 1153

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1153

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1154

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",       "exploitability_score": "medium",

Network accessline 1154

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",       "exploitability_score": "medium",

Network accessline 1155

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1155

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100594",

Network accessline 1183

"published": "2026-09-26T03:17:07.703",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1183

"published": "2026-09-26T03:17:07.703",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1184

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1184

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1185

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1185

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw",

Network accessline 1186

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1186

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-activation"

Network accessline 1187

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1187

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1188

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",       "exploitability_score": "high",

Network accessline 1188

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",       "exploitability_score": "high",

Network accessline 1189

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1189

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100593",

Network accessline 1217

"published": "2026-09-26T03:17:07.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1217

"published": "2026-09-26T03:17:07.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1218

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1218

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1219

"https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1219

"https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m",

Network accessline 1220

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1220

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming"

Network accessline 1221

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1221

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1222

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",       "exploitability_score": "medium",

Network accessline 1222

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",       "exploitability_score": "medium",

Network accessline 1223

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1223

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100592",

Network accessline 1251

"published": "2026-09-26T03:17:07.403",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1251

"published": "2026-09-26T03:17:07.403",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1252

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1252

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1253

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1253

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc",

Network accessline 1254

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1254

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory"

Network accessline 1255

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1255

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1256

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",       "exploitability_score": "medium",

Network accessline 1256

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",       "exploitability_score": "medium",

Network accessline 1257

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1257

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100591",

Network accessline 1285

"published": "2026-09-26T03:17:07.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1285

"published": "2026-09-26T03:17:07.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1286

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1286

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1287

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1287

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m",

Network accessline 1288

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1288

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-voice-set"

Network accessline 1289

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1289

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1290

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",       "exploitability_score": "medium",

Network accessline 1290

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",       "exploitability_score": "medium",

Network accessline 1291

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1291

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100590",

Network accessline 1319

"published": "2026-09-26T03:17:07.110",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1319

"published": "2026-09-26T03:17:07.110",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1320

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1320

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1321

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1321

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83",

Network accessline 1322

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1322

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-sandbox-bypass-via-browser-node"

Network accessline 1323

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1323

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1324

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",       "exploitability_score": "high",

Network accessline 1324

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",       "exploitability_score": "high",

Network accessline 1325

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1325

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100589",

Network accessline 1353

"published": "2026-09-26T03:17:06.963",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1353

"published": "2026-09-26T03:17:06.963",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1354

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1354

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1355

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1355

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p",

Network accessline 1356

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1356

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-node-invoke"

Network accessline 1357

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1357

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1358

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",       "exploitability_score": "high",

Network accessline 1358

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",       "exploitability_score": "high",

Network accessline 1359

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1359

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100588",

Network accessline 1387

"published": "2026-09-26T03:17:06.810",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1387

"published": "2026-09-26T03:17:06.810",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1388

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1388

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1389

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1389

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r",

Network accessline 1390

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1390

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-codex-install"

Network accessline 1391

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1391

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1392

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",       "exploitability_score": "high",

Network accessline 1392

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",       "exploitability_score": "high",

Network accessline 1393

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1393

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100587",

Network accessline 1421

"published": "2026-09-26T03:17:06.660",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1421

"published": "2026-09-26T03:17:06.660",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1422

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",         "https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1422

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",         "https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1423

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1423

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x",

Network accessline 1424

"https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1424

"https://www.vulncheck.com/advisories/openclaw-codex-before-2026.7.1-authorization-bypass-via-bind"

Network accessline 1425

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1425

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1426

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",       "exploitability_score": "high",

Network accessline 1426

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",       "exploitability_score": "high",

Network accessline 1427

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1427

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100586",

Network accessline 1455

"published": "2026-09-26T03:17:06.517",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1455

"published": "2026-09-26T03:17:06.517",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1456

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1456

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1457

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1457

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82",

Network accessline 1458

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1458

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-mcp-channel"

Network accessline 1459

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1459

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1460

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",       "exploitability_score": "high",

Network accessline 1460

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",       "exploitability_score": "high",

Network accessline 1461

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1461

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100585",

Network accessline 1489

"published": "2026-09-26T03:17:06.373",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1489

"published": "2026-09-26T03:17:06.373",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1490

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1490

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1491

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1491

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6",

Network accessline 1492

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1492

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-allowlist-bypass-via-workspace-shadows"

Network accessline 1493

],       "cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1493

],       "cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1494

"cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",       "exploitability_score": "high",

Network accessline 1494

"cvss_score": 6.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",       "exploitability_score": "high",

Network accessline 1495

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1495

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100584",

Network accessline 1523

"published": "2026-09-26T03:17:06.223",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1523

"published": "2026-09-26T03:17:06.223",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",         "https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",         "https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw",

Network accessline 1526

"https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1526

"https://www.vulncheck.com/advisories/openclaw-discord-before-2026.7.1-authorization-bypass"

Network accessline 1527

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1527

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1528

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",       "exploitability_score": "medium",

Network accessline 1528

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",       "exploitability_score": "medium",

Network accessline 1529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100583",

Network accessline 1557

"published": "2026-09-26T03:17:06.080",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1557

"published": "2026-09-26T03:17:06.080",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1558

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",         "https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1558

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",         "https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1559

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1559

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf",

Network accessline 1560

"https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1560

"https://www.vulncheck.com/advisories/openclaw-msteams-before-2026.8.1-channel-read-allowlist-bypass"

Network accessline 1561

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Network accessline 1561

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Network accessline 1562

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",       "exploitability_score": "high",

Network accessline 1562

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",       "exploitability_score": "high",

Network accessline 1563

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Network accessline 1563

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100582",

Access to secretsline 1583
```
[Credential-related source omitted]
```
Access to secretsline 1583
```
[Credential-related source omitted]
```

Network accessline 1591

"published": "2026-09-26T03:17:05.930",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1591

"published": "2026-09-26T03:17:05.930",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1592

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",         "https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1592

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",         "https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1593

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1593

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r",

Network accessline 1594

"https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1594

"https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension"

Network accessline 1595

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1595

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1596

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",       "exploitability_score": "medium",

Network accessline 1596

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",       "exploitability_score": "medium",

Network accessline 1597

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1597

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100581",

Network accessline 1625

"published": "2026-09-26T03:17:05.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1625

"published": "2026-09-26T03:17:05.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1626

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1626

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1627

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1627

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4",

Network accessline 1628

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1628

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-remote-code-execution-via-cron-tool"

Network accessline 1629

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1629

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1630

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",       "exploitability_score": "high",

Network accessline 1630

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",       "exploitability_score": "high",

Network accessline 1631

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1631

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100580",

Network accessline 1659

"published": "2026-09-26T03:17:05.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1659

"published": "2026-09-26T03:17:05.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1660

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1660

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1661

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1661

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4",

Network accessline 1662

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1662

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-spoofed-requester"

Network accessline 1663

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1663

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1664

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",       "exploitability_score": "high",

Network accessline 1664

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",       "exploitability_score": "high",

Network accessline 1665

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1665

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100579",

Network accessline 1693

"published": "2026-09-26T03:17:05.483",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1693

"published": "2026-09-26T03:17:05.483",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1694

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1694

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1695

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1695

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw",

Network accessline 1696

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1696

"https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authorization-bypass-via-chat-send"

Network accessline 1697

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1697

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1698

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",       "exploitability_score": "high",

Network accessline 1698

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",       "exploitability_score": "high",

Network accessline 1699

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1699

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100578",

Network accessline 1727

"published": "2026-09-26T03:17:05.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1727

"published": "2026-09-26T03:17:05.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1728

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1728

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1729

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1729

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf",

Network accessline 1730

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1730

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-server-side-request-forgery-via-video-asset"

Network accessline 1731

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",

Network accessline 1731

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",

Network accessline 1732

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",

Network accessline 1732

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",

Network accessline 1733

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 1733

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100577",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 1761

"published": "2026-09-26T03:17:05.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1761

"published": "2026-09-26T03:17:05.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1762

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1762

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1763

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1763

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738",

Network accessline 1764

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1764

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-browser-wait-predicates"

Network accessline 1765

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",

Network accessline 1765

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",

Network accessline 1766

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",

Network accessline 1766

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",

Network accessline 1767

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 1767

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100576",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.4); network accessible; SSRF affects agents making external requests",

Network accessline 1795

"published": "2026-09-26T03:17:05.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1795

"published": "2026-09-26T03:17:05.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1796

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",         "https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1796

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",         "https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1797

"https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1797

"https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j",

Network accessline 1798

"https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1798

"https://www.vulncheck.com/advisories/openclaw-slack-before-2026.8.1-authentication-bypass-via-group-dm"

Network accessline 1799

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1799

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1800

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",       "exploitability_score": "high",

Network accessline 1800

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",       "exploitability_score": "high",

Network accessline 1801

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1801

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100575",

Network accessline 1829

"published": "2026-09-26T03:17:04.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1829

"published": "2026-09-26T03:17:04.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1830

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1830

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1831

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1831

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph",

Network accessline 1832

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1832

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-ssrf-via-trusted-host-dns"

Network accessline 1833

],       "cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",

Network accessline 1833

],       "cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",

Network accessline 1834

"cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",

Network accessline 1834

"cvss_score": 5.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",

Network accessline 1835

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.9); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 1835

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100574",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (5.9); remotely exploitable without authentication; SSRF affects agents making externa

Network accessline 1863

"published": "2026-09-26T03:17:04.743",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1863

"published": "2026-09-26T03:17:04.743",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1864

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1864

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1865

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1865

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj",

Network accessline 1866

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1866

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback"

Network accessline 1867

],       "cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1867

],       "cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1868

"cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",       "exploitability_score": "low",

Network accessline 1868

"cvss_score": 3.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",       "exploitability_score": "low",

Network accessline 1869

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1869

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100573",

Network accessline 1897

"published": "2026-09-26T03:17:04.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1897

"published": "2026-09-26T03:17:04.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1898

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1898

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1899

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1899

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr",

Network accessline 1900

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1900

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-denial-of-service-via-rate-limit"

Network accessline 1901

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1901

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1902

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",       "exploitability_score": "high",

Network accessline 1902

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",       "exploitability_score": "high",

Network accessline 1903

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1903

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100572",

Network accessline 1931

"published": "2026-09-26T03:17:04.330",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1931

"published": "2026-09-26T03:17:04.330",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1932

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1932

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1933

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1933

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h",

Network accessline 1934

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1934

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sms-webhook-rate-limit-bypass"

Network accessline 1935

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Network accessline 1935

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Network accessline 1936

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",       "exploitability_score": "high",

Network accessline 1936

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",       "exploitability_score": "high",

Network accessline 1937

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Network accessline 1937

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100571",

Access to secretsline 1957
```
[Credential-related source omitted]
```
Access to secretsline 1957
```
[Credential-related source omitted]
```

Network accessline 1965

"published": "2026-09-26T03:17:04.177",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1965

"published": "2026-09-26T03:17:04.177",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1966

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1966

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1967

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1967

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv",

Network accessline 1968

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1968

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-remote-code-execution-via-cloudsdk-python-args"

Network accessline 1969

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1969

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1970

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",       "exploitability_score": "medium",

Network accessline 1970

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",       "exploitability_score": "medium",

Network accessline 1971

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1971

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100570",

Network accessline 1999

"published": "2026-09-26T03:17:04.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 1999

"published": "2026-09-26T03:17:04.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw",

Network accessline 2002

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2002

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-endpoint-override"

Network accessline 2003

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2003

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2004

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",       "exploitability_score": "high",

Network accessline 2004

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",       "exploitability_score": "high",

Network accessline 2005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100569",

Network accessline 2033

"published": "2026-09-26T03:17:03.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2033

"published": "2026-09-26T03:17:03.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2034

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2034

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2035

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2035

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp",

Network accessline 2036

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2036

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-unauthorized-command-job-access"

Network accessline 2037

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2037

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2038

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",       "exploitability_score": "high",

Network accessline 2038

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",       "exploitability_score": "high",

Network accessline 2039

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2039

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100568",

Network accessline 2067

"published": "2026-09-26T03:17:03.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2067

"published": "2026-09-26T03:17:03.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2068

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2068

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2069

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2069

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2",

Network accessline 2070

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2070

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-cdp-hostname"

Network accessline 2071

],       "cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",

Network accessline 2071

],       "cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",

Network accessline 2072

"cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",

Network accessline 2072

"cvss_score": 8.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",

Network accessline 2073

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.2); network accessible; SSRF affects agents making external requests",

Network accessline 2073

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100567",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.2); network accessible; SSRF affects agents making external requests",

Network accessline 2101

"published": "2026-09-26T03:17:03.593",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2101

"published": "2026-09-26T03:17:03.593",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2102

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",         "https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2102

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",         "https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2103

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2103

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45",

Network accessline 2104

"https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2104

"https://www.vulncheck.com/advisories/openclaw-line-before-2026.8.1-access-control-inheritance"

Network accessline 2105

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2105

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2106

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",       "exploitability_score": "high",

Network accessline 2106

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",       "exploitability_score": "high",

Network accessline 2107

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2107

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100566",

Network accessline 2135

"published": "2026-09-26T03:17:03.447",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2135

"published": "2026-09-26T03:17:03.447",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2136

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2136

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2137

"https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2137

"https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv",

Network accessline 2138

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2138

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-attendance-export"

Network accessline 2139

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2139

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2140

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",       "exploitability_score": "medium",

Network accessline 2140

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",       "exploitability_score": "medium",

Network accessline 2141

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2141

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100564",

Network accessline 2169

"published": "2026-09-26T03:17:03.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2169

"published": "2026-09-26T03:17:03.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2170

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2170

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2171

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2171

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h",

Network accessline 2172

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2172

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-csv-formula-injection-via-session-labels"

Network accessline 2173

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2173

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2174

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",       "exploitability_score": "medium",

Network accessline 2174

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",       "exploitability_score": "medium",

Network accessline 2175

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2175

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100563",

Network accessline 2203

"published": "2026-09-26T03:17:03.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2203

"published": "2026-09-26T03:17:03.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2204

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2204

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2205

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2205

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f",

Network accessline 2206

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2206

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-sessions-create"

Network accessline 2207

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2207

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2208

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",       "exploitability_score": "medium",

Network accessline 2208

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",       "exploitability_score": "medium",

Network accessline 2209

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2209

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100562",

Network accessline 2237

"published": "2026-09-26T03:17:02.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2237

"published": "2026-09-26T03:17:02.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2238

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2238

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2239

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2239

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w",

Network accessline 2240

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2240

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-exec-wrapper"

Network accessline 2241

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2241

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2242

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",       "exploitability_score": "high",

Network accessline 2242

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",       "exploitability_score": "high",

Network accessline 2243

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2243

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100561",

Network accessline 2271

"published": "2026-09-26T03:17:02.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2271

"published": "2026-09-26T03:17:02.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2272

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2272

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2273

"https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2273

"https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9",

Network accessline 2274

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2274

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-reusable-exec-approvals-authorization-bypass"

Network accessline 2275

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2275

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2276

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",       "exploitability_score": "high",

Network accessline 2276

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",       "exploitability_score": "high",

Network accessline 2277

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2277

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100560",

Network accessline 2305

"published": "2026-09-26T03:17:02.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2305

"published": "2026-09-26T03:17:02.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2306

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2306

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2307

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2307

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw",

Network accessline 2308

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2308

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-command-injection-via-escaped-newlines"

Network accessline 2309

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2309

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2310

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",       "exploitability_score": "high",

Network accessline 2310

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",       "exploitability_score": "high",

Network accessline 2311

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2311

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100559",

Network accessline 2339

"published": "2026-09-26T03:17:02.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2339

"published": "2026-09-26T03:17:02.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2340

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2340

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2341

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2341

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j",

Network accessline 2342

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2342

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-resource-exhaustion-via-websocket-upgrade"

Network accessline 2343

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2343

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2344

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",       "exploitability_score": "high",

Network accessline 2344

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",       "exploitability_score": "high",

Network accessline 2345

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2345

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100558",

Network accessline 2373

"published": "2026-09-26T03:17:02.387",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2373

"published": "2026-09-26T03:17:02.387",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2374

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2374

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2375

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2375

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v",

Network accessline 2376

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2376

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-bypass-via-skill-tool-dispatch"

Network accessline 2377

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2377

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2378

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",       "exploitability_score": "high",

Network accessline 2378

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",       "exploitability_score": "high",

Network accessline 2379

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2379

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100557",

Network accessline 2407

"published": "2026-09-26T03:17:02.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2407

"published": "2026-09-26T03:17:02.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2408

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2408

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2409

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2409

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq",

Network accessline 2410

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2410

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-session-reset"

Network accessline 2411

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2411

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2412

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",       "exploitability_score": "medium",

Network accessline 2412

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",       "exploitability_score": "medium",

Network accessline 2413

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2413

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100556",

Network accessline 2441

"published": "2026-09-26T03:17:02.087",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2441

"published": "2026-09-26T03:17:02.087",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2442

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2442

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2443

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2443

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc",

Network accessline 2444

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2444

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-dns-rebinding-via-attachment-delivery"

Network accessline 2445

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",

Network accessline 2445

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",

Network accessline 2446

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",

Network accessline 2446

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",

Network accessline 2447

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.1); network accessible; SSRF affects agents making external requests",

Network accessline 2447

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100555",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.1); network accessible; SSRF affects agents making external requests",

Network accessline 2475

"published": "2026-09-26T03:17:01.933",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2475

"published": "2026-09-26T03:17:01.933",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2476

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2476

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2477

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2477

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv",

Network accessline 2478

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2478

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-canvas-capability-revocation-bypass"

Network accessline 2479

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2479

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2480

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",       "exploitability_score": "medium",

Network accessline 2480

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",       "exploitability_score": "medium",

Network accessline 2481

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2481

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100554",

Network accessline 2509

"published": "2026-09-26T03:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2509

"published": "2026-09-26T03:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",         "https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",         "https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx",

Network accessline 2512

"https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2512

"https://www.vulncheck.com/advisories/openclaw-2026.6.9-before-2026.8.1-cross-context-policy-bypass-via-feishu-unpin"

Network accessline 2513

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2513

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2514

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",       "exploitability_score": "medium",

Network accessline 2514

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",       "exploitability_score": "medium",

Network accessline 2515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100553",

Network accessline 2543

"published": "2026-09-26T03:17:01.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2543

"published": "2026-09-26T03:17:01.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2544

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2544

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2545

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2545

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw",

Network accessline 2546

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2546

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-native-tools"

Network accessline 2547

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2547

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2548

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",       "exploitability_score": "high",

Network accessline 2548

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",       "exploitability_score": "high",

Network accessline 2549

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2549

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100552",

Network accessline 2577

"published": "2026-09-26T03:17:01.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2577

"published": "2026-09-26T03:17:01.487",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2578

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",         "https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2578

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",         "https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2579

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2579

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p",

Network accessline 2580

"https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2580

"https://www.vulncheck.com/advisories/openclaw-ios-control-ui-tls-pin-enforcement-bypass"

Network accessline 2581

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2581

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2582

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",       "exploitability_score": "high",

Network accessline 2582

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",       "exploitability_score": "high",

Network accessline 2583

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2583

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100551",

Network accessline 2611

"published": "2026-09-26T03:17:01.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2611

"published": "2026-09-26T03:17:01.333",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2612

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2612

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2613

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2613

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq",

Network accessline 2614

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2614

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-access-group"

Network accessline 2615

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2615

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2616

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",       "exploitability_score": "medium",

Network accessline 2616

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",       "exploitability_score": "medium",

Network accessline 2617

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2617

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100550",

Network accessline 2645

"published": "2026-09-26T03:17:01.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2645

"published": "2026-09-26T03:17:01.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2646

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2646

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2647

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2647

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927",

Network accessline 2648

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2648

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames"

Network accessline 2649

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2649

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2650

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",       "exploitability_score": "medium",

Network accessline 2650

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",       "exploitability_score": "medium",

Network accessline 2651

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2651

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100549",

Network accessline 2679

"published": "2026-09-26T03:17:01.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2679

"published": "2026-09-26T03:17:01.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2680

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2680

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2681

"https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2681

"https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh",

Network accessline 2682

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2682

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-exposure-via-embedding-fallback"

Network accessline 2683

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2683

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2684

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",       "exploitability_score": "medium",

Network accessline 2684

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",       "exploitability_score": "medium",

Network accessline 2685

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2685

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100548",

Network accessline 2713

"published": "2026-09-26T03:17:00.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2713

"published": "2026-09-26T03:17:00.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2714

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2714

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2715

"https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2715

"https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3",

Network accessline 2716

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2716

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-file-url"

Network accessline 2717

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2717

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2718

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",       "exploitability_score": "medium",

Network accessline 2718

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",       "exploitability_score": "medium",

Network accessline 2719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100547",

Network accessline 2747

"published": "2026-09-26T03:17:00.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2747

"published": "2026-09-26T03:17:00.737",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2748

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",         "https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2748

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",         "https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2749

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2749

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8",

Network accessline 2750

"https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2750

"https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript"

Network accessline 2751

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2751

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2752

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",       "exploitability_score": "medium",

Network accessline 2752

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",       "exploitability_score": "medium",

Network accessline 2753

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2753

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100546",

Network accessline 2781

"published": "2026-09-26T03:17:00.590",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2781

"published": "2026-09-26T03:17:00.590",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2782

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2782

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2783

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2783

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr",

Network accessline 2784

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2784

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-policy-bypass-via-session-filename-generation"

Network accessline 2785

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2785

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2786

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",       "exploitability_score": "high",

Network accessline 2786

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",       "exploitability_score": "high",

Network accessline 2787

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2787

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100545",

Network accessline 2815

"published": "2026-09-26T03:17:00.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2815

"published": "2026-09-26T03:17:00.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2816

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",         "https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2816

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",         "https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2817

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2817

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh",

Network accessline 2818

"https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2818

"https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass"

Network accessline 2819

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2819

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2820

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",       "exploitability_score": "high",

Network accessline 2820

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",       "exploitability_score": "high",

Network accessline 2821

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2821

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100544",

Network accessline 2849

"published": "2026-09-26T03:17:00.287",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2849

"published": "2026-09-26T03:17:00.287",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2850

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2850

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2851

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2851

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f",

Network accessline 2852

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2852

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-information-disclosure-via-configuration-hash"

Network accessline 2853

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2853

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2854

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",       "exploitability_score": "high",

Network accessline 2854

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",       "exploitability_score": "high",

Network accessline 2855

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2855

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100543",

Network accessline 2883

"published": "2026-09-26T03:17:00.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2883

"published": "2026-09-26T03:17:00.140",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2884

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2884

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2885

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2885

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h",

Network accessline 2886

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2886

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-extraction-limit-bypass-via-tar-bz2"

Network accessline 2887

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2887

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2888

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",       "exploitability_score": "high",

Network accessline 2888

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",       "exploitability_score": "high",

Network accessline 2889

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2889

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100542",

Network accessline 2917

"published": "2026-09-26T03:16:59.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2917

"published": "2026-09-26T03:16:59.987",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",         "https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",         "https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r",

Network accessline 2920

"https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2920

"https://www.vulncheck.com/advisories/openclaw-matrix-before-2026.8.1-authorization-bypass-via-case-folding"

Network accessline 2921

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2921

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2922

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",       "exploitability_score": "high",

Network accessline 2922

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",       "exploitability_score": "high",

Network accessline 2923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100541",

Network accessline 2951

"published": "2026-09-26T03:16:59.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2951

"published": "2026-09-26T03:16:59.833",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2952

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",         "https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2952

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",         "https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2953

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2953

"https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6",

Network accessline 2954

"https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2954

"https://www.vulncheck.com/advisories/openclaw-feishu-before-2026.8.1-authentication-bypass-via-disabled-account"

Network accessline 2955

],       "cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2955

],       "cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2956

"cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",       "exploitability_score": "high",

Network accessline 2956

"cvss_score": 6.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",       "exploitability_score": "high",

Network accessline 2957

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2957

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100540",

Network accessline 2985

"published": "2026-09-26T03:16:59.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2985

"published": "2026-09-26T03:16:59.680",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2986

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2986

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2987

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2987

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv",

Network accessline 2988

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2988

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-memory-access-control-bypass"

Network accessline 2989

],       "cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 2989

],       "cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 2990

"cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",       "exploitability_score": "low",

Network accessline 2990

"cvss_score": 2.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",       "exploitability_score": "low",

Network accessline 2991

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 2991

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100539",

Network accessline 3019

"published": "2026-09-26T03:16:59.537",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3019

"published": "2026-09-26T03:16:59.537",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3020

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3020

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3021

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3021

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc",

Network accessline 3022

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3022

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-local-file-read-via-outbound-attachments"

Network accessline 3023

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3023

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3024

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",       "exploitability_score": "medium",

Network accessline 3024

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",       "exploitability_score": "medium",

Network accessline 3025

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3025

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100538",

Network accessline 3053

"published": "2026-09-26T03:16:59.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3053

"published": "2026-09-26T03:16:59.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3054

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3054

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3055

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3055

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj",

Network accessline 3056

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3056

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authentication-bypass-via-active-memory"

Network accessline 3057

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3057

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3058

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",       "exploitability_score": "low",

Network accessline 3058

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",       "exploitability_score": "low",

Network accessline 3059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100537",

Network accessline 3087

"published": "2026-09-26T03:16:59.247",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3087

"published": "2026-09-26T03:16:59.247",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3088

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3088

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3089

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3089

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",

Network accessline 3090

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3090

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments"

Network accessline 3091

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3091

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3092

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",       "exploitability_score": "high",

Network accessline 3092

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",       "exploitability_score": "high",

Network accessline 3093

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3093

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",

Network accessline 3121

"published": "2026-09-26T03:16:59.103",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3121

"published": "2026-09-26T03:16:59.103",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3122

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3122

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3123

"https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3123

"https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23",

Network accessline 3124

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3124

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-privilege-escalation-via-session-memory"

Network accessline 3125

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3125

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3126

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",       "exploitability_score": "high",

Network accessline 3126

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",       "exploitability_score": "high",

Network accessline 3127

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3127

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100535",

Network accessline 3155

"published": "2026-09-26T03:16:58.957",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3155

"published": "2026-09-26T03:16:58.957",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3156

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3156

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3157

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3157

"https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc",

Network accessline 3158

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3158

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-session-cancellation-authorization-bypass"

Network accessline 3159

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3159

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3160

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",       "exploitability_score": "low",

Network accessline 3160

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",       "exploitability_score": "low",

Network accessline 3161

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3161

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100534",

Network accessline 3189

"published": "2026-09-26T03:16:58.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3189

"published": "2026-09-26T03:16:58.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3190

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3190

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3191

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3191

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg",

Network accessline 3192

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3192

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-unicode-fallback"

Network accessline 3193

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3193

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3194

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",       "exploitability_score": "medium",

Network accessline 3194

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",       "exploitability_score": "medium",

Network accessline 3195

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3195

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100533",

Network accessline 3223

"published": "2026-09-26T03:16:58.367",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3223

"published": "2026-09-26T03:16:58.367",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q",

Network accessline 3226

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3226

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-exec-approval-directory-binding"

Network accessline 3227

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3227

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3228

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",       "exploitability_score": "high",

Network accessline 3228

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",       "exploitability_score": "high",

Network accessline 3229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100530",

Network accessline 3257

"published": "2026-09-26T03:16:58.217",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3257

"published": "2026-09-26T03:16:58.217",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3258

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3258

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3259

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3259

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp",

Network accessline 3260

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3260

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-authorization-scope-widening-via-file-transfer"

Network accessline 3261

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3261

],       "cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3262

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",       "exploitability_score": "medium",

Network accessline 3262

"cvss_score": 6.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",       "exploitability_score": "medium",

Network accessline 3263

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3263

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100529",

Network accessline 3291

"published": "2026-09-26T03:16:58.057",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3291

"published": "2026-09-26T03:16:58.057",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3292

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3292

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3293

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3293

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9",

Network accessline 3294

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3294

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-credential-disclosure-via-provider-endpoint"

Network accessline 3295

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3295

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3296

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",       "exploitability_score": "medium",

Network accessline 3296

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",       "exploitability_score": "medium",

Network accessline 3297

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3297

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100528",

Network accessline 3325

"published": "2026-09-26T03:16:57.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3325

"published": "2026-09-26T03:16:57.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3326

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3326

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",         "https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3327

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3327

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938",

Network accessline 3328

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3328

"https://www.vulncheck.com/advisories/openclaw-before-2026.8.2-denial-of-service-via-browser-relay"

Network accessline 3329

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3329

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3330

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",       "exploitability_score": "high",

Network accessline 3330

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",       "exploitability_score": "high",

Network accessline 3331

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3331

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100527",

Network accessline 3359

"published": "2026-09-26T03:16:57.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3359

"published": "2026-09-26T03:16:57.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3360

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",         "https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3360

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",         "https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3361

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3361

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48",

Network accessline 3362

"https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3362

"https://www.vulncheck.com/advisories/vulnerability-in-discord"

Network accessline 3363

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3363

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3364

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",       "exploitability_score": "medium",

Network accessline 3364

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",       "exploitability_score": "medium",

Network accessline 3365

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3365

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100526",

Network accessline 3393

"published": "2026-09-26T03:16:57.563",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3393

"published": "2026-09-26T03:16:57.563",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3394

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",         "https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3394

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",         "https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3395

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3395

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr",

Network accessline 3396

"https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3396

"https://www.vulncheck.com/advisories/openclaw-diagnostics-prometheus-before-2026.9.3-authentication-bypass"

Network accessline 3397

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3397

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3398

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",       "exploitability_score": "high",

Network accessline 3398

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",       "exploitability_score": "high",

Network accessline 3399

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3399

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100525",

Network accessline 3427

"published": "2026-09-22T21:17:34.583",       "references": [         "https://github.com/openclaw/openclaw",

Network accessline 3427

"published": "2026-09-22T21:17:34.583",       "references": [         "https://github.com/openclaw/openclaw",

Network accessline 3428

"references": [         "https://github.com/openclaw/openclaw",         "https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3428

"references": [         "https://github.com/openclaw/openclaw",         "https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3429
```
"https://github.com/openclaw/openclaw",
```
Network accessline 3429
```
"https://github.com/openclaw/openclaw",
```

Network accessline 3430

"https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3430

"https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038",

Network accessline 3431

"https://github.com/openclaw/openclaw/commit/8361f3704dd5e151ff1325e62ff5de658b6c62e6"

Network accessline 3431

"https://github.com/openclaw/openclaw/commit/8361f3704dd5e151ff1325e62ff5de658b6c62e6"

Network accessline 3432

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3432

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3433

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",       "exploitability_score": "medium",

Network accessline 3433

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",       "exploitability_score": "medium",

Network accessline 3434

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3434

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95815",

Network accessline 3462

"published": "2026-09-20T23:17:03.530",       "references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3462

"published": "2026-09-20T23:17:03.530",       "references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3463

"references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",         "https://vuldb.com/cve/CVE-2026-94094",

Network accessline 3463

"references": [         "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",         "https://vuldb.com/cve/CVE-2026-94094",

Network accessline 3464

"https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3464

"https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report",

Network accessline 3465
```
"https://vuldb.com/cve/CVE-2026-94094",
```
Network accessline 3465
```
"https://vuldb.com/cve/CVE-2026-94094",
```
Network accessline 3466
```
"https://vuldb.com/submit/882009"
```
Network accessline 3466
```
"https://vuldb.com/submit/882009"
```

Network accessline 3467

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3467

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3468

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",       "exploitability_score": "medium",

Network accessline 3468

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",       "exploitability_score": "medium",

Network accessline 3469

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3469

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094",

Network accessline 3497

"published": "2026-09-15T15:17:32.800",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3497

"published": "2026-09-15T15:17:32.800",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3498

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3498

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3499

"https://github.com/openclaw/clawscan/",

Network accessline 3499

"https://github.com/openclaw/clawscan/",

Network accessline 3500

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3500

"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa",

Network accessline 3501

"https://github.com/openclaw/clawscan/issues/40"

Network accessline 3501

"https://github.com/openclaw/clawscan/issues/40"

Network accessline 3502

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3502

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3503

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",       "exploitability_score": "low",

Network accessline 3503

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",       "exploitability_score": "low",

Network accessline 3504

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3504

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91836",

Network accessline 3532

"published": "2026-09-15T15:17:32.567",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3532

"published": "2026-09-15T15:17:32.567",       "references": [         "https://github.com/openclaw/clawscan/",

Network accessline 3533

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3533

"references": [         "https://github.com/openclaw/clawscan/",         "https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3534

"https://github.com/openclaw/clawscan/",

Network accessline 3534

"https://github.com/openclaw/clawscan/",

Network accessline 3535

"https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3535

"https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8",

Network accessline 3536

"https://github.com/openclaw/clawscan/issues/42"

Network accessline 3536

"https://github.com/openclaw/clawscan/issues/42"

Network accessline 3537

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3537

],       "cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3538

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",       "exploitability_score": "low",

Network accessline 3538

"cvss_score": 2.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",       "exploitability_score": "low",

Network accessline 3539

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3539

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91835",

Network accessline 3573

"published": "2026-09-14T21:17:41.987",       "references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3573

"published": "2026-09-14T21:17:41.987",       "references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3574

"references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",         "https://github.com/netease-youdao/LobsterAI/",

Network accessline 3574

"references": [         "https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",         "https://github.com/netease-youdao/LobsterAI/",

Network accessline 3575

"https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3575

"https://gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78d",

Network accessline 3576

"https://github.com/netease-youdao/LobsterAI/",

Network accessline 3576

"https://github.com/netease-youdao/LobsterAI/",

Network accessline 3577

"https://github.com/netease-youdao/LobsterAI/issues/2181"

Network accessline 3577

"https://github.com/netease-youdao/LobsterAI/issues/2181"

Network accessline 3578

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",

Network accessline 3578

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",

Network accessline 3579

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",

Network accessline 3579

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",

Network accessline 3580

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (4.3); network accessible; SSRF affects agents making external requests",

Network accessline 3580

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90818",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (4.3); network accessible; SSRF affects agents making external requests",

Network accessline 3608

"published": "2026-09-14T18:20:28.530",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 3608

"published": "2026-09-14T18:20:28.530",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 3609

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3609

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3610

"https://github.com/nanocoai/nanoclaw/",

Network accessline 3610

"https://github.com/nanocoai/nanoclaw/",

Network accessline 3611

"https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3611

"https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33",

Network accessline 3612

"https://github.com/nanocoai/nanoclaw/issues/2828"

Network accessline 3612

"https://github.com/nanocoai/nanoclaw/issues/2828"

Network accessline 3613

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3613

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3614

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",       "exploitability_score": "medium",

Network accessline 3614

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",       "exploitability_score": "medium",

Network accessline 3615

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3615

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807",

Network accessline 3652

"updated": "2026-09-11T00:58:46Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3652

"updated": "2026-09-11T00:58:46Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3653

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"       ],

Network accessline 3653

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"       ],

Network accessline 3654

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3654

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"

Network accessline 3656

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3656

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3657

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",       "nvd_url": null,

Network accessline 3657

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",       "nvd_url": null,

Network accessline 3658

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3658

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67",

Network accessline 3695

"updated": "2026-09-11T00:57:53Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3695

"updated": "2026-09-11T00:57:53Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3696

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"       ],

Network accessline 3696

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"       ],

Network accessline 3697

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3697

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"

Network accessline 3699

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3699

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3700

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",       "nvd_url": null,

Network accessline 3700

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",       "nvd_url": null,

Network accessline 3701

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3701

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq",

Network accessline 3737

"updated": "2026-09-11T00:57:28Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3737

"updated": "2026-09-11T00:57:28Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3738

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"       ],

Network accessline 3738

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"       ],

Network accessline 3739

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3739

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"

Network accessline 3741

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3741

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3742

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",       "nvd_url": null,

Network accessline 3742

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",       "nvd_url": null,

Network accessline 3743

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3743

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295",

Network accessline 3772

"published": "2026-09-03T13:06:21.603",       "references": [         "https://vuldb.com/cve/CVE-2026-85107",

Network accessline 3772

"published": "2026-09-03T13:06:21.603",       "references": [         "https://vuldb.com/cve/CVE-2026-85107",

Network accessline 3773

"references": [         "https://vuldb.com/cve/CVE-2026-85107",         "https://vuldb.com/submit/885135",

Network accessline 3773

"references": [         "https://vuldb.com/cve/CVE-2026-85107",         "https://vuldb.com/submit/885135",

Network accessline 3774
```
"https://vuldb.com/cve/CVE-2026-85107",
```
Network accessline 3774
```
"https://vuldb.com/cve/CVE-2026-85107",
```
Network accessline 3775
```
"https://vuldb.com/submit/885135",
```
Network accessline 3775
```
"https://vuldb.com/submit/885135",
```
Network accessline 3776
```
"https://vuldb.com/vuln/398314"
```
Network accessline 3776
```
"https://vuldb.com/vuln/398314"
```

Network accessline 3777

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3777

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3778

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",       "exploitability_score": "high",

Network accessline 3778

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",       "exploitability_score": "high",

Network accessline 3779

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3779

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85107",

Network accessline 3807

"published": "2026-09-03T13:06:21.437",       "references": [         "https://vuldb.com/cve/CVE-2026-85106",

Network accessline 3807

"published": "2026-09-03T13:06:21.437",       "references": [         "https://vuldb.com/cve/CVE-2026-85106",

Network accessline 3808

"references": [         "https://vuldb.com/cve/CVE-2026-85106",         "https://vuldb.com/submit/885132",

Network accessline 3808

"references": [         "https://vuldb.com/cve/CVE-2026-85106",         "https://vuldb.com/submit/885132",

Network accessline 3809
```
"https://vuldb.com/cve/CVE-2026-85106",
```
Network accessline 3809
```
"https://vuldb.com/cve/CVE-2026-85106",
```
Network accessline 3810
```
"https://vuldb.com/submit/885132",
```
Network accessline 3810
```
"https://vuldb.com/submit/885132",
```
Network accessline 3811
```
"https://vuldb.com/vuln/398313"
```
Network accessline 3811
```
"https://vuldb.com/vuln/398313"
```

Network accessline 3812

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",

Network accessline 3812

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",

Network accessline 3813

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",

Network accessline 3813

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",

Network accessline 3814

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 3814

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85106",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 3842

"published": "2026-09-03T13:06:21.250",       "references": [         "https://vuldb.com/cve/CVE-2026-85105",

Network accessline 3842

"published": "2026-09-03T13:06:21.250",       "references": [         "https://vuldb.com/cve/CVE-2026-85105",

Network accessline 3843

"references": [         "https://vuldb.com/cve/CVE-2026-85105",         "https://vuldb.com/submit/885131",

Network accessline 3843

"references": [         "https://vuldb.com/cve/CVE-2026-85105",         "https://vuldb.com/submit/885131",

Network accessline 3844
```
"https://vuldb.com/cve/CVE-2026-85105",
```
Network accessline 3844
```
"https://vuldb.com/cve/CVE-2026-85105",
```
Network accessline 3845
```
"https://vuldb.com/submit/885131",
```
Network accessline 3845
```
"https://vuldb.com/submit/885131",
```
Network accessline 3846
```
"https://vuldb.com/vuln/398312"
```
Network accessline 3846
```
"https://vuldb.com/vuln/398312"
```

Network accessline 3847

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3847

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3848

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",       "exploitability_score": "high",

Network accessline 3848

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",       "exploitability_score": "high",

Network accessline 3849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85105",

Network accessline 3877

"published": "2026-09-01T22:17:18.813",       "references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3877

"published": "2026-09-01T22:17:18.813",       "references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3878

"references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",         "https://vuldb.com/cve/CVE-2026-84289",

Network accessline 3878

"references": [         "https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",         "https://vuldb.com/cve/CVE-2026-84289",

Network accessline 3879

"https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3879

"https://github.com/lche511/cve/blob/main/Hermes_MCP_Tool_Resource_Amplification_DoS_Report/REPORT.md",

Network accessline 3880
```
"https://vuldb.com/cve/CVE-2026-84289",
```
Network accessline 3880
```
"https://vuldb.com/cve/CVE-2026-84289",
```
Network accessline 3881
```
"https://vuldb.com/submit/882960"
```
Network accessline 3881
```
"https://vuldb.com/submit/882960"
```

Network accessline 3882

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3882

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3883

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",       "exploitability_score": "high",

Network accessline 3883

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",       "exploitability_score": "high",

Network accessline 3884

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3884

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84289",

Network accessline 3912

"published": "2026-09-01T22:17:18.647",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3912

"published": "2026-09-01T22:17:18.647",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3913

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84288",

Network accessline 3913

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84288",

Network accessline 3914

"https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3914

"https://github.com/hackerguopeng/cve/tree/main/Hermes_ACP_Queued_Prompt_DoS_Report",

Network accessline 3915
```
"https://vuldb.com/cve/CVE-2026-84288",
```
Network accessline 3915
```
"https://vuldb.com/cve/CVE-2026-84288",
```
Network accessline 3916
```
"https://vuldb.com/submit/882873"
```
Network accessline 3916
```
"https://vuldb.com/submit/882873"
```

Network accessline 3917

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3917

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3918

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",       "exploitability_score": "medium",

Network accessline 3918

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",       "exploitability_score": "medium",

Network accessline 3919

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3919

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84288",

Network accessline 3947

"published": "2026-09-01T21:18:46.567",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3947

"published": "2026-09-01T21:18:46.567",       "references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3948

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84287",

Network accessline 3948

"references": [         "https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",         "https://vuldb.com/cve/CVE-2026-84287",

Network accessline 3949

"https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3949

"https://github.com/hackerguopeng/cve/tree/main/Hermes_API_Server_Session_Chat_DoS_Report",

Network accessline 3950
```
"https://vuldb.com/cve/CVE-2026-84287",
```
Network accessline 3950
```
"https://vuldb.com/cve/CVE-2026-84287",
```
Network accessline 3951
```
"https://vuldb.com/submit/882712"
```
Network accessline 3951
```
"https://vuldb.com/submit/882712"
```

Network accessline 3952

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3952

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3953

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",       "exploitability_score": "medium",

Network accessline 3953

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",       "exploitability_score": "medium",

Network accessline 3954

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3954

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84287",

Network accessline 3982

"published": "2026-08-06T08:16:30.087",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 3982

"published": "2026-08-06T08:16:30.087",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 3983

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3983

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3984

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 3984

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 3985

"https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3985

"https://github.com/mf-yang/openclaw-cn/issues/565",

Network accessline 3986

"https://github.com/mf-yang/openclaw-cn/issues/566"

Network accessline 3986

"https://github.com/mf-yang/openclaw-cn/issues/566"

Network accessline 3987

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 3987

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 3988

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",       "exploitability_score": "medium",

Network accessline 3988

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",       "exploitability_score": "medium",

Network accessline 3989

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 3989

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19008",

Network accessline 4017

"published": "2026-08-06T07:16:29.947",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4017

"published": "2026-08-06T07:16:29.947",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4018

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4018

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4019

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4019

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4020

"https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4020

"https://github.com/mf-yang/openclaw-cn/issues/564",

Network accessline 4021
```
"https://vuldb.com/cve/CVE-2026-19007"
```
Network accessline 4021
```
"https://vuldb.com/cve/CVE-2026-19007"
```

Network accessline 4022

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4022

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4023

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",       "exploitability_score": "medium",

Network accessline 4023

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",       "exploitability_score": "medium",

Network accessline 4024

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4024

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19007",

Network accessline 4052

"published": "2026-08-06T07:16:29.780",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4052

"published": "2026-08-06T07:16:29.780",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4053

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4053

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4054

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4054

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4055

"https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4055

"https://github.com/mf-yang/openclaw-cn/issues/563",

Network accessline 4056
```
"https://vuldb.com/cve/CVE-2026-19006"
```
Network accessline 4056
```
"https://vuldb.com/cve/CVE-2026-19006"
```

Network accessline 4057

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4057

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4058

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",       "exploitability_score": "medium",

Network accessline 4058

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",       "exploitability_score": "medium",

Network accessline 4059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4059

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19006",

Network accessline 4087

"published": "2026-08-06T07:16:29.583",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4087

"published": "2026-08-06T07:16:29.583",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4088

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4088

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4089

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4089

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4090

"https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4090

"https://github.com/nanocoai/nanoclaw/issues/2807",

Network accessline 4091
```
"https://vuldb.com/cve/CVE-2026-19005"
```
Network accessline 4091
```
"https://vuldb.com/cve/CVE-2026-19005"
```

Network accessline 4092

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4092

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4093

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",       "exploitability_score": "medium",

Network accessline 4093

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",       "exploitability_score": "medium",

Network accessline 4094

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4094

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005",

Network accessline 4122

"published": "2026-08-06T05:16:41.380",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4122

"published": "2026-08-06T05:16:41.380",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4123

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4123

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4124

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4124

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4125

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4125

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4126

"https://github.com/NousResearch/hermes-agent/issues/48181"

Network accessline 4126

"https://github.com/NousResearch/hermes-agent/issues/48181"

Network accessline 4127

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4127

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4128

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",       "exploitability_score": "medium",

Network accessline 4128

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",       "exploitability_score": "medium",

Network accessline 4129

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4129

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18993",

Network accessline 4157

"published": "2026-08-06T03:16:22.130",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4157

"published": "2026-08-06T03:16:22.130",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4158

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4158

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4159

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4159

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4160

"https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4160

"https://github.com/nanocoai/nanoclaw/issues/2760",

Network accessline 4161
```
"https://vuldb.com/cve/CVE-2026-18991"
```
Network accessline 4161
```
"https://vuldb.com/cve/CVE-2026-18991"
```

Network accessline 4162

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4162

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4163

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",       "exploitability_score": "high",

Network accessline 4163

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",       "exploitability_score": "high",

Network accessline 4164

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4164

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991",

Network accessline 4192

"published": "2026-08-06T02:16:41.430",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4192

"published": "2026-08-06T02:16:41.430",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4193

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4193

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4194

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4194

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4195

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4195

"https://github.com/NousResearch/hermes-agent/issues/46171",

Network accessline 4196

"https://github.com/NousResearch/hermes-agent/pull/46185"

Network accessline 4196

"https://github.com/NousResearch/hermes-agent/pull/46185"

Network accessline 4197

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4197

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4198

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",       "exploitability_score": "medium",

Network accessline 4198

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",       "exploitability_score": "medium",

Network accessline 4199

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4199

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18976",

Network accessline 4227

"published": "2026-08-04T17:16:48.287",       "references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4227

"published": "2026-08-04T17:16:48.287",       "references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4228

"references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",         "https://vuldb.com/cve/CVE-2026-18775",

Network accessline 4228

"references": [         "https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",         "https://vuldb.com/cve/CVE-2026-18775",

Network accessline 4229

"https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4229

"https://gist.github.com/YLChen-007/2e5bf7fa58113967807425032234cc89",

Network accessline 4230
```
"https://vuldb.com/cve/CVE-2026-18775",
```
Network accessline 4230
```
"https://vuldb.com/cve/CVE-2026-18775",
```
Network accessline 4231
```
"https://vuldb.com/submit/856877"
```
Network accessline 4231
```
"https://vuldb.com/submit/856877"
```

Network accessline 4232

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",

Network accessline 4232

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",

Network accessline 4233

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",

Network accessline 4233

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",

Network accessline 4234

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4234

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18775",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4262

"published": "2026-08-04T17:16:48.127",       "references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4262

"published": "2026-08-04T17:16:48.127",       "references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4263

"references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",         "https://vuldb.com/cve/CVE-2026-18774",

Network accessline 4263

"references": [         "https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",         "https://vuldb.com/cve/CVE-2026-18774",

Network accessline 4264

"https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4264

"https://gist.github.com/YLChen-007/7c71603a25d84f372f2275dd570e99d4",

Network accessline 4265
```
"https://vuldb.com/cve/CVE-2026-18774",
```
Network accessline 4265
```
"https://vuldb.com/cve/CVE-2026-18774",
```
Network accessline 4266
```
"https://vuldb.com/submit/856875"
```
Network accessline 4266
```
"https://vuldb.com/submit/856875"
```

Network accessline 4267

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",

Network accessline 4267

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",

Network accessline 4268

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",

Network accessline 4268

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",

Network accessline 4269

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4269

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18774",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4297

"published": "2026-08-04T16:16:22.470",       "references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4297

"published": "2026-08-04T16:16:22.470",       "references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4298

"references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",         "https://vuldb.com/cve/CVE-2026-18773",

Network accessline 4298

"references": [         "https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",         "https://vuldb.com/cve/CVE-2026-18773",

Network accessline 4299

"https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4299

"https://gist.github.com/YLChen-007/f0036aa1c410b70f5e41272947180645",

Network accessline 4300
```
"https://vuldb.com/cve/CVE-2026-18773",
```
Network accessline 4300
```
"https://vuldb.com/cve/CVE-2026-18773",
```
Network accessline 4301
```
"https://vuldb.com/submit/856874"
```
Network accessline 4301
```
"https://vuldb.com/submit/856874"
```

Network accessline 4302

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4302

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4303

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",       "exploitability_score": "medium",

Network accessline 4303

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",       "exploitability_score": "medium",

Network accessline 4304

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4304

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18773",

Network accessline 4332

"published": "2026-08-03T21:16:39.450",       "references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4332

"published": "2026-08-03T21:16:39.450",       "references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4333

"references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",         "https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4333

"references": [         "https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",         "https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4334

"https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4334

"https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35",

Network accessline 4335

"https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4335

"https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg"

Network accessline 4336

],       "cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4336

],       "cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4337

"cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",       "exploitability_score": "unknown",

Network accessline 4337

"cvss_score": null,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",       "exploitability_score": "unknown",

Network accessline 4338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48063",

Network accessline 4367

"published": "2026-07-30T23:16:53.687",       "references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4367

"published": "2026-07-30T23:16:53.687",       "references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4368

"references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4368

"references": [         "https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4369

"https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4369

"https://github.com/theopaid/Stored-Cross-Site-Scripting-Via-Agent-Messages-Leading-To-Session-Token-Theft-openclaw-dashboard-",

Network accessline 4370

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4370

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4371

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-lastmessage-session-field"

Network accessline 4371

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-lastmessage-session-field"

Network accessline 4372

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4372

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4373

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",       "exploitability_score": "high",

Network accessline 4373

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",       "exploitability_score": "high",

Network accessline 4374

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4374

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66421",

Network accessline 4403

"published": "2026-07-30T21:18:12.490",       "references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4403

"published": "2026-07-30T21:18:12.490",       "references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4404

"references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4404

"references": [         "https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",         "https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4405

"https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4405

"https://github.com/theopaid/Unauthenticated-Stored-Cross-Site-Scripting-Leading-To-Administrator-Account-Takeover",

Network accessline 4406

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4406

"https://github.com/tugcantopaloglu/openclaw-dashboard",

Network accessline 4407

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-failed-login-username-field"

Network accessline 4407

"https://www.vulncheck.com/advisories/openclaw-dashboard-stored-xss-via-failed-login-username-field"

Network accessline 4408

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4408

],       "cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4409

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",       "exploitability_score": "high",

Network accessline 4409

"cvss_score": 9.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",       "exploitability_score": "high",

Network accessline 4410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66418",

Network accessline 4438

"published": "2026-07-26T11:16:58.470",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4438

"published": "2026-07-26T11:16:58.470",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4439

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4439

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4440

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4440

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4441

"https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4441

"https://github.com/mf-yang/openclaw-cn/issues/562",

Network accessline 4442
```
"https://vuldb.com/cve/CVE-2026-17458"
```
Network accessline 4442
```
"https://vuldb.com/cve/CVE-2026-17458"
```

Network accessline 4443

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",

Network accessline 4443

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",

Network accessline 4444

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",

Network accessline 4444

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",

Network accessline 4445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17458",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4473

"published": "2026-07-26T10:16:25.163",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4473

"published": "2026-07-26T10:16:25.163",       "references": [         "https://github.com/mf-yang/openclaw-cn/",

Network accessline 4474

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4474

"references": [         "https://github.com/mf-yang/openclaw-cn/",         "https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4475

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4475

"https://github.com/mf-yang/openclaw-cn/",

Network accessline 4476

"https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4476

"https://github.com/mf-yang/openclaw-cn/issues/561",

Network accessline 4477
```
"https://vuldb.com/cve/CVE-2026-17457"
```
Network accessline 4477
```
"https://vuldb.com/cve/CVE-2026-17457"
```

Network accessline 4478

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4478

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4479

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",       "exploitability_score": "medium",

Network accessline 4479

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",       "exploitability_score": "medium",

Network accessline 4480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17457",

Network accessline 4508

"published": "2026-07-26T04:16:46.573",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4508

"published": "2026-07-26T04:16:46.573",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4509

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4509

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4510

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4510

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4511

"https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4511

"https://github.com/nanocoai/nanoclaw/commit/e5b928783d5c485637565eb07d2967922dfbf8d8",

Network accessline 4512

"https://github.com/nanocoai/nanoclaw/issues/2762"

Network accessline 4512

"https://github.com/nanocoai/nanoclaw/issues/2762"

Network accessline 4513

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4513

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4514

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",       "exploitability_score": "medium",

Network accessline 4514

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",       "exploitability_score": "medium",

Network accessline 4515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434",

Network accessline 4543

"published": "2026-07-26T03:16:32.490",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4543

"published": "2026-07-26T03:16:32.490",       "references": [         "https://github.com/nanocoai/nanoclaw/",

Network accessline 4544

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4544

"references": [         "https://github.com/nanocoai/nanoclaw/",         "https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4545

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4545

"https://github.com/nanocoai/nanoclaw/",

Network accessline 4546

"https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4546

"https://github.com/nanocoai/nanoclaw/issues/2761",

Network accessline 4547
```
"https://vuldb.com/cve/CVE-2026-17433"
```
Network accessline 4547
```
"https://vuldb.com/cve/CVE-2026-17433"
```

Network accessline 4548

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4548

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4549

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",       "exploitability_score": "medium",

Network accessline 4549

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",       "exploitability_score": "medium",

Network accessline 4550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433",

Network accessline 4578

"published": "2026-07-26T01:16:25.783",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4578

"published": "2026-07-26T01:16:25.783",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 4579

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4579

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4580

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4580

"https://github.com/NousResearch/hermes-agent/",

Network accessline 4581

"https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4581

"https://github.com/NousResearch/hermes-agent/commit/490c486ff65b766d9de0fe0e6f26e1778aaa8fb3",

Network accessline 4582

"https://github.com/NousResearch/hermes-agent/issues/44729"

Network accessline 4582

"https://github.com/NousResearch/hermes-agent/issues/44729"

Network accessline 4583

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4583

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4584

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",       "exploitability_score": "medium",

Network accessline 4584

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",       "exploitability_score": "medium",

Network accessline 4585

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4585

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17432",

Network accessline 4613

"published": "2026-07-19T00:16:40.650",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4613

"published": "2026-07-19T00:16:40.650",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4614

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4614

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4615
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4615
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4616

"https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4616

"https://github.com/sipeed/picoclaw/commit/017601354be38cb027ff3ffb01aed79bd5d12610",

Network accessline 4617

"https://github.com/sipeed/picoclaw/issues/3080"

Network accessline 4617

"https://github.com/sipeed/picoclaw/issues/3080"

Network accessline 4618

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4618

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4619

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",       "exploitability_score": "high",

Network accessline 4619

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",       "exploitability_score": "high",

Network accessline 4620

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4620

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16198",

Network accessline 4648

"published": "2026-07-18T23:17:01.187",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4648

"published": "2026-07-18T23:17:01.187",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4649

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4649

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4650
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4650
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4651

"https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4651

"https://github.com/sipeed/picoclaw/issues/3082",

Network accessline 4652
```
"https://vuldb.com/cve/CVE-2026-16197"
```
Network accessline 4652
```
"https://vuldb.com/cve/CVE-2026-16197"
```

Network accessline 4653

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4653

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4654

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",       "exploitability_score": "medium",

Network accessline 4654

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",       "exploitability_score": "medium",

Network accessline 4655

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4655

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16197",

Network accessline 4683

"published": "2026-07-18T23:17:01.010",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4683

"published": "2026-07-18T23:17:01.010",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4684

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4684

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4685
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4685
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4686

"https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4686

"https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405",

Network accessline 4687

"https://github.com/sipeed/picoclaw/issues/3077"

Network accessline 4687

"https://github.com/sipeed/picoclaw/issues/3077"

Network accessline 4688

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",

Network accessline 4688

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",

Network accessline 4689

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",

Network accessline 4689

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",

Network accessline 4690

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4690

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16196",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 4718

"published": "2026-07-18T23:17:00.847",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4718

"published": "2026-07-18T23:17:00.847",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4719

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4719

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4720
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4720
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4721

"https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4721

"https://github.com/sipeed/picoclaw/issues/3076",

Network accessline 4722
```
"https://vuldb.com/cve/CVE-2026-16195"
```
Network accessline 4722
```
"https://vuldb.com/cve/CVE-2026-16195"
```

Network accessline 4723

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4723

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4724

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",       "exploitability_score": "medium",

Network accessline 4724

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",       "exploitability_score": "medium",

Network accessline 4725

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4725

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16195",

Network accessline 4753

"published": "2026-07-18T10:17:25.627",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4753

"published": "2026-07-18T10:17:25.627",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4754

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4754

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4755
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4755
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4756

"https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4756

"https://github.com/sipeed/picoclaw/issues/3075",

Network accessline 4757
```
"https://vuldb.com/cve/CVE-2026-16085"
```
Network accessline 4757
```
"https://vuldb.com/cve/CVE-2026-16085"
```

Network accessline 4758

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4758

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4759

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",       "exploitability_score": "medium",

Network accessline 4759

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",       "exploitability_score": "medium",

Network accessline 4760

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4760

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16085",

Network accessline 4788

"published": "2026-07-18T09:17:08.113",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4788

"published": "2026-07-18T09:17:08.113",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4789

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4789

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4790
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4790
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4791

"https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4791

"https://github.com/sipeed/picoclaw/commit/c15aac21fe05ee103a470e1104bc891754e83392",

Network accessline 4792

"https://github.com/sipeed/picoclaw/issues/3074"

Network accessline 4792

"https://github.com/sipeed/picoclaw/issues/3074"

Network accessline 4793

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",

Network accessline 4793

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",

Network accessline 4794

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",

Network accessline 4794

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",

Network accessline 4795

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.3); remotely exploitable without authentication; SSRF affects agents making external r

Network accessline 4795

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16084",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.3); remotely exploitable without authentication; SSRF affects agents making external r

Network accessline 4823

"published": "2026-07-18T09:17:07.953",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4823

"published": "2026-07-18T09:17:07.953",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4824

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4824

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4825
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4825
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4826

"https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4826

"https://github.com/sipeed/picoclaw/issues/3073",

Network accessline 4827
```
"https://vuldb.com/cve/CVE-2026-16083"
```
Network accessline 4827
```
"https://vuldb.com/cve/CVE-2026-16083"
```

Network accessline 4828

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4828

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4829

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",       "exploitability_score": "high",

Network accessline 4829

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",       "exploitability_score": "high",

Network accessline 4830

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4830

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16083",

Network accessline 4858

"published": "2026-07-18T09:17:07.783",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4858

"published": "2026-07-18T09:17:07.783",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4859

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4859

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4860
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4860
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4861

"https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4861

"https://github.com/sipeed/picoclaw/issues/3081",

Network accessline 4862
```
"https://vuldb.com/cve/CVE-2026-16082"
```
Network accessline 4862
```
"https://vuldb.com/cve/CVE-2026-16082"
```

Network accessline 4863

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4863

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4864

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",       "exploitability_score": "medium",

Network accessline 4864

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",       "exploitability_score": "medium",

Network accessline 4865

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4865

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16082",

Network accessline 4893

"published": "2026-07-18T08:16:35.130",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4893

"published": "2026-07-18T08:16:35.130",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 4894

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4894

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4895
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 4895
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 4896

"https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4896

"https://github.com/sipeed/picoclaw/commit/4b0229351678f479429b8d8b19207757266f246b",

Network accessline 4897

"https://github.com/sipeed/picoclaw/issues/3072"

Network accessline 4897

"https://github.com/sipeed/picoclaw/issues/3072"

Network accessline 4898

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4898

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4899

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",       "exploitability_score": "medium",

Network accessline 4899

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",       "exploitability_score": "medium",

Network accessline 4900

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4900

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16081",

Network accessline 4929

"published": "2026-07-17T02:18:10.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4929

"published": "2026-07-17T02:18:10.290",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4930

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4930

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4931

"https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4931

"https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7",

Network accessline 4932

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4932

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching"

Network accessline 4933

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4933

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4934

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",       "exploitability_score": "high",

Network accessline 4934

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",       "exploitability_score": "high",

Network accessline 4935

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4935

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62229",

Network accessline 4964

"published": "2026-07-17T02:18:10.153",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4964

"published": "2026-07-17T02:18:10.153",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4965

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4965

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4966

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4966

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8f46-3xx3-8c9m",

Network accessline 4967

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4967

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-node-exec-approvals"

Network accessline 4968

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4968

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4969

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",       "exploitability_score": "high",

Network accessline 4969

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",       "exploitability_score": "high",

Network accessline 4970

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4970

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62228",

Network accessline 4999

"published": "2026-07-17T02:18:10.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 4999

"published": "2026-07-17T02:18:10.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",         "https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5000

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",         "https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5001

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x93-h3hg-2xfp",

Network accessline 5002

"https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5002

"https://www.vulncheck.com/advisories/openclaw-ssrf-via-browser-snapshot"

Network accessline 5003

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",

Network accessline 5003

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",

Network accessline 5004

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",

Network accessline 5004

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",

Network accessline 5005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5005

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62227",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5034

"published": "2026-07-17T02:18:09.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5034

"published": "2026-07-17T02:18:09.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5035

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5035

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5036

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5036

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x863-pqjw-hmgf",

Network accessline 5037

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5037

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-browser-act-route"

Network accessline 5038

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",

Network accessline 5038

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",

Network accessline 5039

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",

Network accessline 5039

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",

Network accessline 5040

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 5040

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62226",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 5069

"published": "2026-07-17T02:18:09.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5069

"published": "2026-07-17T02:18:09.750",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5070

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5070

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5071

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5071

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2",

Network accessline 5072

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5072

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatch"

Network accessline 5073

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5073

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5074

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",       "exploitability_score": "medium",

Network accessline 5074

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",       "exploitability_score": "medium",

Network accessline 5075

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5075

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62225",

Network accessline 5103

"published": "2026-07-17T02:18:09.603",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5103

"published": "2026-07-17T02:18:09.603",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",         "https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",         "https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7w4v-g4m6-j88v",

Network accessline 5106

"https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5106

"https://www.vulncheck.com/advisories/openclaw-ms-teams-authorization-bypass"

Network accessline 5107

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5107

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5108

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",       "exploitability_score": "medium",

Network accessline 5108

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",       "exploitability_score": "medium",

Network accessline 5109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62224",

Network accessline 5138

"published": "2026-07-17T02:18:09.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5138

"published": "2026-07-17T02:18:09.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hx85-fgcw-9vrc",

Network accessline 5141

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5141

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair"

Network accessline 5142

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5142

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5143

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",       "exploitability_score": "high",

Network accessline 5143

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",       "exploitability_score": "high",

Network accessline 5144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62223",

Network accessline 5173

"published": "2026-07-17T02:18:09.273",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5173

"published": "2026-07-17T02:18:09.273",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",         "https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",         "https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq",

Network accessline 5176

"https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5176

"https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode"

Network accessline 5177

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5177

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5178

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",       "exploitability_score": "medium",

Network accessline 5178

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",       "exploitability_score": "medium",

Network accessline 5179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62222",

Network accessline 5208

"published": "2026-07-17T02:18:09.133",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5208

"published": "2026-07-17T02:18:09.133",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh8v-vgcv-pwh4",

Network accessline 5211

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5211

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-allowfrom"

Network accessline 5212

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5212

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5213

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",       "exploitability_score": "medium",

Network accessline 5213

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",       "exploitability_score": "medium",

Network accessline 5214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62221",

Network accessline 5243

"published": "2026-07-17T02:18:08.990",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5243

"published": "2026-07-17T02:18:08.990",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",         "https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",         "https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5p6w-wmh3-frfr",

Network accessline 5246

"https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5246

"https://www.vulncheck.com/advisories/openclaw-websocket-rate-limit-bypass"

Network accessline 5247

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5247

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5248

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",       "exploitability_score": "high",

Network accessline 5248

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",       "exploitability_score": "high",

Network accessline 5249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62220",

Network accessline 5278

"published": "2026-07-17T02:18:08.847",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5278

"published": "2026-07-17T02:18:08.847",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5",

Network accessline 5281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids"

Network accessline 5282

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5282

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5283

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",       "exploitability_score": "high",

Network accessline 5283

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",       "exploitability_score": "high",

Network accessline 5284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62219",

Network accessline 5313

"published": "2026-07-17T02:18:08.693",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5313

"published": "2026-07-17T02:18:08.693",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8v95-qqcm-qp9h",

Network accessline 5316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-device-pair-approve"

Network accessline 5317

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5317

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5318

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",       "exploitability_score": "high",

Network accessline 5318

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",       "exploitability_score": "high",

Network accessline 5319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62218",

Network accessline 5348

"published": "2026-07-17T02:18:08.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5348

"published": "2026-07-17T02:18:08.553",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7jx6-764p-fgg9",

Network accessline 5351

"https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5351

"https://www.vulncheck.com/advisories/openclaw-beta-1-authentication-bypass-via-exec-approvals"

Network accessline 5352

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5352

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5353

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",       "exploitability_score": "high",

Network accessline 5353

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",       "exploitability_score": "high",

Network accessline 5354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62217",

Network accessline 5383

"published": "2026-07-17T02:18:08.420",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5383

"published": "2026-07-17T02:18:08.420",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fwgr-fpv9-vf5x",

Network accessline 5386

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5386

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-media-upload"

Network accessline 5387

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",

Network accessline 5387

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",

Network accessline 5388

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",

Network accessline 5388

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",

Network accessline 5389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.0); network accessible; SSRF affects agents making external requests",

Network accessline 5389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62216",       "exploitability_score": "medium",       "exploitability_rationale": "Medium CVSS score (5.0); network accessible; SSRF affects agents making external requests",

Network accessline 5418

"published": "2026-07-17T02:18:08.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5418

"published": "2026-07-17T02:18:08.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5",

Network accessline 5421

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5421

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canvas"

Network accessline 5422

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5422

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5423

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",       "exploitability_score": "high",

Network accessline 5423

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",       "exploitability_score": "high",

Network accessline 5424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62215",

Network accessline 5453

"published": "2026-07-17T02:18:08.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5453

"published": "2026-07-17T02:18:08.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",         "https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",         "https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr",

Network accessline 5456

"https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5456

"https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation"

Network accessline 5457

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5457

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5458

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",       "exploitability_score": "medium",

Network accessline 5458

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",       "exploitability_score": "medium",

Network accessline 5459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62214",

Network accessline 5488

"published": "2026-07-17T02:18:07.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",

Network accessline 5488

"published": "2026-07-17T02:18:07.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",

Network accessline 5489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"       ],

Network accessline 5490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v54h-q2vx-vgg4",         "https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"       ],

Network accessline 5491

"https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5491

"https://www.vulncheck.com/advisories/openclaw-token-leakage-via-ms-teams-outbound-requests"

Network accessline 5492

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5492

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5493

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",       "exploitability_score": "medium",

Network accessline 5493

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",       "exploitability_score": "medium",

Network accessline 5494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62213",

Network accessline 5523

"published": "2026-07-17T02:18:07.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5523

"published": "2026-07-17T02:18:07.783",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxm8-ghhq-q688",

Network accessline 5526

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5526

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-safefetch"

Network accessline 5527

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5527

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5528

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",       "exploitability_score": "high",

Network accessline 5528

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",       "exploitability_score": "high",

Network accessline 5529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62212",

Network accessline 5558

"published": "2026-07-17T02:18:07.620",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5558

"published": "2026-07-17T02:18:07.620",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",         "https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",         "https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm",

Network accessline 5561

"https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5561

"https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export"

Network accessline 5562

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5562

],       "cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5563

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",       "exploitability_score": "medium",

Network accessline 5563

"cvss_score": 5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",       "exploitability_score": "medium",

Network accessline 5564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62211",

Network accessline 5593

"published": "2026-07-17T02:18:07.470",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5593

"published": "2026-07-17T02:18:07.470",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",         "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",         "https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5",

Network accessline 5596

"https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5596

"https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls"

Network accessline 5597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",       "exploitability_score": "high",

Network accessline 5598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",       "exploitability_score": "high",

Network accessline 5599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62210",

Network accessline 5628

"published": "2026-07-17T02:18:07.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5628

"published": "2026-07-17T02:18:07.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wp73-f3gg-w4vr",

Network accessline 5631

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5631

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-agent-mode-dispatch"

Network accessline 5632

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5632

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5633

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",       "exploitability_score": "high",

Network accessline 5633

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",       "exploitability_score": "high",

Network accessline 5634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62209",

Network accessline 5663

"published": "2026-07-17T02:18:07.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5663

"published": "2026-07-17T02:18:07.187",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",         "https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",         "https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579c",

Network accessline 5666

"https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5666

"https://www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-sse"

Network accessline 5667

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5667

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5668

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",       "exploitability_score": "medium",

Network accessline 5668

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",       "exploitability_score": "medium",

Network accessline 5669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62208",

Network accessline 5698

"published": "2026-07-17T02:18:07.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5698

"published": "2026-07-17T02:18:07.040",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf",

Network accessline 5701

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5701

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools"

Network accessline 5702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",       "exploitability_score": "high",

Network accessline 5703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",       "exploitability_score": "high",

Network accessline 5704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62207",

Network accessline 5733

"published": "2026-07-17T02:18:06.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5733

"published": "2026-07-17T02:18:06.887",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f6p7-6326-vf7v",

Network accessline 5736

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5736

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-moderation-actions"

Network accessline 5737

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5737

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5738

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",       "exploitability_score": "high",

Network accessline 5738

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",       "exploitability_score": "high",

Network accessline 5739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62206",

Network accessline 5768

"published": "2026-07-17T02:18:06.747",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5768

"published": "2026-07-17T02:18:06.747",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",         "https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p5xh-frrh-cmgj",

Network accessline 5771

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5771

"https://www.vulncheck.com/advisories/openclaw-beta-1-authorization-bypass-via-message-actions"

Network accessline 5772

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5772

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5773

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",       "exploitability_score": "high",

Network accessline 5773

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",       "exploitability_score": "high",

Network accessline 5774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62205",

Network accessline 5803

"published": "2026-07-17T02:18:06.587",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5803

"published": "2026-07-17T02:18:06.587",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",         "https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",         "https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wxh3-g47h-q3mc",

Network accessline 5806

"https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5806

"https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-rustup"

Network accessline 5807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",       "exploitability_score": "high",

Network accessline 5808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",       "exploitability_score": "high",

Network accessline 5809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62203",

Network accessline 5838

"published": "2026-07-17T02:18:06.430",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5838

"published": "2026-07-17T02:18:06.430",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj",

Network accessline 5841

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5841

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron"

Network accessline 5842

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5842

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5843

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",       "exploitability_score": "high",

Network accessline 5843

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",       "exploitability_score": "high",

Network accessline 5844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62202",

Network accessline 5873

"published": "2026-07-17T02:18:06.170",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5873

"published": "2026-07-17T02:18:06.170",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",         "https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",         "https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgvr-6gvw-3rgr",

Network accessline 5876

"https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5876

"https://www.vulncheck.com/advisories/openclaw-network-policy-bypass-via-exec-server"

Network accessline 5877

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",

Network accessline 5877

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",

Network accessline 5878

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",

Network accessline 5878

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",

Network accessline 5879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62201",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 5908

"published": "2026-07-13T22:16:51.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5908

"published": "2026-07-13T22:16:51.813",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm",

Network accessline 5911

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5911

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport"

Network accessline 5912

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5912

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5913

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",       "exploitability_score": "high",

Network accessline 5913

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",       "exploitability_score": "high",

Network accessline 5914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62200",

Network accessline 5943

"published": "2026-07-13T22:16:51.673",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5943

"published": "2026-07-13T22:16:51.673",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm",

Network accessline 5946

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5946

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-environment-filtering"

Network accessline 5947

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5947

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5948

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",       "exploitability_score": "high",

Network accessline 5948

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",       "exploitability_score": "high",

Network accessline 5949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62199",

Network accessline 5978

"published": "2026-07-13T22:16:51.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5978

"published": "2026-07-13T22:16:51.533",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g",

Network accessline 5981

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5981

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search"

Network accessline 5982

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 5982

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 5983

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",       "exploitability_score": "medium",

Network accessline 5983

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",       "exploitability_score": "medium",

Network accessline 5984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 5984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62198",

Network accessline 6013

"published": "2026-07-13T22:16:51.380",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6013

"published": "2026-07-13T22:16:51.380",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",         "https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65",

Network accessline 6016

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6016

"https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery"

Network accessline 6017

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",

Network accessline 6017

],       "cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",

Network accessline 6018

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",

Network accessline 6018

"cvss_score": 8.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",

Network accessline 6019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 6019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62197",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (8.5); network accessible; SSRF affects agents making external requests",

Network accessline 6048

"published": "2026-07-13T22:16:51.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6048

"published": "2026-07-13T22:16:51.243",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fh38-965w-f6c3",

Network accessline 6051

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6051

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-whatsapp-group-ids"

Network accessline 6052

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6052

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6053

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",       "exploitability_score": "high",

Network accessline 6053

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",       "exploitability_score": "high",

Network accessline 6054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62196",

Network accessline 6083

"published": "2026-07-13T22:16:51.100",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6083

"published": "2026-07-13T22:16:51.100",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-52xj-c9p8-78cv",

Network accessline 6086

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6086

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-mcp-loopback"

Network accessline 6087

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6087

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6088

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",       "exploitability_score": "high",

Network accessline 6088

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",       "exploitability_score": "high",

Network accessline 6089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62195",

Network accessline 6118

"published": "2026-07-13T22:16:50.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6118

"published": "2026-07-13T22:16:50.943",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76",

Network accessline 6121

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6121

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install"

Network accessline 6122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",       "exploitability_score": "high",

Network accessline 6123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",       "exploitability_score": "high",

Network accessline 6124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62194",

Network accessline 6153

"published": "2026-07-13T22:16:50.600",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6153

"published": "2026-07-13T22:16:50.600",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",         "https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw",

Network accessline 6156

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6156

"https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-plugin-install"

Network accessline 6157

],       "cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6157

],       "cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6158

"cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",       "exploitability_score": "medium",

Network accessline 6158

"cvss_score": 4.9,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",       "exploitability_score": "medium",

Network accessline 6159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62193",

Network accessline 6188

"published": "2026-07-13T22:16:50.457",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6188

"published": "2026-07-13T22:16:50.457",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3pmr-x9g8-m55r",

Network accessline 6191

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6191

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass"

Network accessline 6192

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6192

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6193

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",       "exploitability_score": "high",

Network accessline 6193

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",       "exploitability_score": "high",

Network accessline 6194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62192",

Network accessline 6223

"published": "2026-07-13T22:16:50.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6223

"published": "2026-07-13T22:16:50.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hx-r36p-f68m",

Network accessline 6226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-message-mutations"

Network accessline 6227

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6227

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6228

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",       "exploitability_score": "high",

Network accessline 6228

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",       "exploitability_score": "high",

Network accessline 6229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62191",

Network accessline 6258

"published": "2026-07-13T22:16:50.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6258

"published": "2026-07-13T22:16:50.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66",

Network accessline 6261

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6261

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper"

Network accessline 6262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",       "exploitability_score": "high",

Network accessline 6263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",       "exploitability_score": "high",

Network accessline 6264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62190",

Network accessline 6293

"published": "2026-07-13T22:16:50.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6293

"published": "2026-07-13T22:16:50.037",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6294

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",         "https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6294

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",         "https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6295

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6295

"https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9",

Network accessline 6296

"https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6296

"https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-sync"

Network accessline 6297

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6297

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6298

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",       "exploitability_score": "high",

Network accessline 6298

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",       "exploitability_score": "high",

Network accessline 6299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62189",

Network accessline 6328

"published": "2026-07-13T22:16:49.893",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6328

"published": "2026-07-13T22:16:49.893",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6329

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",         "https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6329

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",         "https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6330

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6330

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w8wf-3qvj-6xqf",

Network accessline 6331

"https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6331

"https://www.vulncheck.com/advisories/openclaw-feishu-authorization-bypass"

Network accessline 6332

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6332

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6333

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",       "exploitability_score": "high",

Network accessline 6333

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",       "exploitability_score": "high",

Network accessline 6334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62188",

Network accessline 6363

"published": "2026-07-13T22:16:49.753",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6363

"published": "2026-07-13T22:16:49.753",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6364

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",         "https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6364

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",         "https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6365

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6365

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8",

Network accessline 6366

"https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6366

"https://www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypass"

Network accessline 6367

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6367

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6368

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",       "exploitability_score": "high",

Network accessline 6368

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",       "exploitability_score": "high",

Network accessline 6369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62187",

Network accessline 6398

"published": "2026-07-13T22:16:49.607",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6398

"published": "2026-07-13T22:16:49.607",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6399

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6399

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6400

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6400

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jhfx-v2j8-x3m6",

Network accessline 6401

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6401

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-model-override"

Network accessline 6402

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6402

],       "cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6403

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",       "exploitability_score": "high",

Network accessline 6403

"cvss_score": 7.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",       "exploitability_score": "high",

Network accessline 6404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62186",

Network accessline 6432

"published": "2026-07-10T03:16:20.723",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6432

"published": "2026-07-10T03:16:20.723",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6433

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6433

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6434
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6434
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6435

"https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6435

"https://github.com/sipeed/picoclaw/issues/3071",

Network accessline 6436
```
"https://vuldb.com/cve/CVE-2026-15320"
```
Network accessline 6436
```
"https://vuldb.com/cve/CVE-2026-15320"
```

Network accessline 6437

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6437

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6438

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",       "exploitability_score": "medium",

Network accessline 6438

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",       "exploitability_score": "medium",

Network accessline 6439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320",

Network accessline 6467

"published": "2026-07-10T03:16:20.433",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6467

"published": "2026-07-10T03:16:20.433",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6468

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6468

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6469
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6469
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6470

"https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6470

"https://github.com/sipeed/picoclaw/issues/3069",

Network accessline 6471

"https://github.com/sipeed/picoclaw/pull/3126"

Network accessline 6471

"https://github.com/sipeed/picoclaw/pull/3126"

Network accessline 6472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",       "exploitability_score": "high",

Network accessline 6473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",       "exploitability_score": "high",

Network accessline 6474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319",

Network accessline 6502

"published": "2026-07-10T02:16:25.457",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6502

"published": "2026-07-10T02:16:25.457",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6503

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6503

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6504
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6504
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6505

"https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6505

"https://github.com/sipeed/picoclaw/issues/3068",

Network accessline 6506
```
"https://vuldb.com/cve/CVE-2026-15318"
```
Network accessline 6506
```
"https://vuldb.com/cve/CVE-2026-15318"
```

Network accessline 6507

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6507

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6508

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",       "exploitability_score": "medium",

Network accessline 6508

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",       "exploitability_score": "medium",

Network accessline 6509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318",

Network accessline 6537

"published": "2026-07-10T00:16:33.027",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6537

"published": "2026-07-10T00:16:33.027",       "references": [         "https://github.com/sipeed/picoclaw/",

Network accessline 6538

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6538

"references": [         "https://github.com/sipeed/picoclaw/",         "https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6539
```
"https://github.com/sipeed/picoclaw/",
```
Network accessline 6539
```
"https://github.com/sipeed/picoclaw/",
```

Network accessline 6540

"https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6540

"https://github.com/sipeed/picoclaw/issues/3078",

Network accessline 6541
```
"https://vuldb.com/cve/CVE-2026-15317"
```
Network accessline 6541
```
"https://vuldb.com/cve/CVE-2026-15317"
```

Network accessline 6542

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",

Network accessline 6542

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",

Network accessline 6543

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",

Network accessline 6543

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",

Network accessline 6544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 6544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15317",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.3); network accessible; SSRF affects agents making external requests",

Network accessline 6572

"published": "2026-07-10T00:16:32.853",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6572

"published": "2026-07-10T00:16:32.853",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6573

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6573

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6574

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6574

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6575

"https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6575

"https://github.com/NousResearch/hermes-agent/issues/42667",

Network accessline 6576

"https://github.com/NousResearch/hermes-agent/pull/42759"

Network accessline 6576

"https://github.com/NousResearch/hermes-agent/pull/42759"

Network accessline 6577

],       "cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6577

],       "cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6578

"cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",       "exploitability_score": "low",

Network accessline 6578

"cvss_score": 3.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",       "exploitability_score": "low",

Network accessline 6579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15311",

Network accessline 6607

"published": "2026-07-09T17:16:57.947",       "references": [         "https://github.com/AidanPark/openclaw-android/",

Network accessline 6607

"published": "2026-07-09T17:16:57.947",       "references": [         "https://github.com/AidanPark/openclaw-android/",

Network accessline 6608

"references": [         "https://github.com/AidanPark/openclaw-android/",         "https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6608

"references": [         "https://github.com/AidanPark/openclaw-android/",         "https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6609

"https://github.com/AidanPark/openclaw-android/",

Network accessline 6609

"https://github.com/AidanPark/openclaw-android/",

Network accessline 6610

"https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6610

"https://github.com/AidanPark/openclaw-android/issues/136",

Network accessline 6611

"https://github.com/AidanPark/openclaw-android/pull/137"

Network accessline 6611

"https://github.com/AidanPark/openclaw-android/pull/137"

Network accessline 6612

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6612

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6613

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",       "exploitability_score": "high",

Network accessline 6613

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",       "exploitability_score": "high",

Network accessline 6614

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6614

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15193",

Network accessline 6643

"published": "2026-07-08T17:17:25.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6643

"published": "2026-07-08T17:17:25.640",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6644

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",         "https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6644

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",         "https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6645

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6645

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4pqj-3c56-5fqq",

Network accessline 6646

"https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6646

"https://www.vulncheck.com/advisories/openclaw-credential-override-via-workspace-dotenv-files"

Network accessline 6647

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6647

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6648

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",       "exploitability_score": "medium",

Network accessline 6648

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",       "exploitability_score": "medium",

Network accessline 6649

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6649

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59261",

Network accessline 6677

"published": "2026-07-06T00:16:55.037",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6677

"published": "2026-07-06T00:16:55.037",       "references": [         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6678

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6678

"references": [         "https://github.com/NousResearch/hermes-agent/",         "https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6679

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6679

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6680

"https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6680

"https://github.com/NousResearch/hermes-agent/commit/56f833efa427ccb444c0f9ad1759af1012f2124d",

Network accessline 6681

"https://github.com/NousResearch/hermes-agent/issues/38643"

Network accessline 6681

"https://github.com/NousResearch/hermes-agent/issues/38643"

Network accessline 6682

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6682

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6683

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",       "exploitability_score": "medium",

Network accessline 6683

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",       "exploitability_score": "medium",

Network accessline 6684

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6684

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14783",

Network accessline 6712

"published": "2026-07-04T13:16:30.413",       "references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6712

"published": "2026-07-04T13:16:30.413",       "references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6713

"references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",         "https://vuldb.com/cve/CVE-2026-14628",

Network accessline 6713

"references": [         "https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",         "https://vuldb.com/cve/CVE-2026-14628",

Network accessline 6714

"https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6714

"https://gist.github.com/YLChen-007/8af7eff27b50bec24b2d0f76dd1c4383",

Network accessline 6715
```
"https://vuldb.com/cve/CVE-2026-14628",
```
Network accessline 6715
```
"https://vuldb.com/cve/CVE-2026-14628",
```
Network accessline 6716
```
"https://vuldb.com/submit/845599"
```
Network accessline 6716
```
"https://vuldb.com/submit/845599"
```

Network accessline 6717

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6717

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6718

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",       "exploitability_score": "high",

Network accessline 6718

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",       "exploitability_score": "high",

Network accessline 6719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6719

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14628",

Network accessline 6747

"published": "2026-07-04T13:16:30.230",       "references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6747

"published": "2026-07-04T13:16:30.230",       "references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6748

"references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",         "https://vuldb.com/cve/CVE-2026-14627",

Network accessline 6748

"references": [         "https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",         "https://vuldb.com/cve/CVE-2026-14627",

Network accessline 6749

"https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6749

"https://gist.github.com/YLChen-007/d030c690b10a97319efb129ca2f5badb",

Network accessline 6750
```
"https://vuldb.com/cve/CVE-2026-14627",
```
Network accessline 6750
```
"https://vuldb.com/cve/CVE-2026-14627",
```
Network accessline 6751
```
"https://vuldb.com/submit/845598"
```
Network accessline 6751
```
"https://vuldb.com/submit/845598"
```

Network accessline 6752

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6752

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6753

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",       "exploitability_score": "high",

Network accessline 6753

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",       "exploitability_score": "high",

Network accessline 6754

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6754

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14627",

Network accessline 6782

"published": "2026-07-04T12:16:53.903",       "references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6782

"published": "2026-07-04T12:16:53.903",       "references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6783

"references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",         "https://vuldb.com/cve/CVE-2026-14626",

Network accessline 6783

"references": [         "https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",         "https://vuldb.com/cve/CVE-2026-14626",

Network accessline 6784

"https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6784

"https://gist.github.com/YLChen-007/b91a85f9448beadebe25d37a3f4fd760",

Network accessline 6785
```
"https://vuldb.com/cve/CVE-2026-14626",
```
Network accessline 6785
```
"https://vuldb.com/cve/CVE-2026-14626",
```
Network accessline 6786
```
"https://vuldb.com/submit/845596"
```
Network accessline 6786
```
"https://vuldb.com/submit/845596"
```

Network accessline 6787

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6787

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6788

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",       "exploitability_score": "medium",

Network accessline 6788

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",       "exploitability_score": "medium",

Network accessline 6789

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6789

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14626",

Network accessline 6817

"published": "2026-07-04T12:16:53.740",       "references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6817

"published": "2026-07-04T12:16:53.740",       "references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6818

"references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",         "https://vuldb.com/cve/CVE-2026-14625",

Network accessline 6818

"references": [         "https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",         "https://vuldb.com/cve/CVE-2026-14625",

Network accessline 6819

"https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6819

"https://gist.github.com/YLChen-007/3b11589740dcf16b152b0929e1b3d024",

Network accessline 6820
```
"https://vuldb.com/cve/CVE-2026-14625",
```
Network accessline 6820
```
"https://vuldb.com/cve/CVE-2026-14625",
```
Network accessline 6821
```
"https://vuldb.com/submit/845595"
```
Network accessline 6821
```
"https://vuldb.com/submit/845595"
```

Network accessline 6822

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6822

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6823

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",       "exploitability_score": "medium",

Network accessline 6823

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",       "exploitability_score": "medium",

Network accessline 6824

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6824

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14625",

Network accessline 6852

"published": "2026-07-03T22:16:52.943",       "references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6852

"published": "2026-07-03T22:16:52.943",       "references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6853

"references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6853

"references": [         "https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",         "https://github.com/NousResearch/hermes-agent/",

Network accessline 6854

"https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6854

"https://gist.github.com/YLChen-007/2229e5505bcbb3e15a7ae8fba4c4be37",

Network accessline 6855

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6855

"https://github.com/NousResearch/hermes-agent/",

Network accessline 6856

"https://github.com/NousResearch/hermes-agent/issues/27288"

Network accessline 6856

"https://github.com/NousResearch/hermes-agent/issues/27288"

Network accessline 6857

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6857

],       "cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6858

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",       "exploitability_score": "low",

Network accessline 6858

"cvss_score": 3.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",       "exploitability_score": "low",

Network accessline 6859

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6859

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14617",

Network accessline 6896

"updated": "2026-06-30T00:38:59Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6896

"updated": "2026-06-30T00:38:59Z",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6897

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"       ],

Network accessline 6897

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"       ],

Network accessline 6898

"https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6898

"https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc"

Network accessline 6900

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6900

"source": "GitHub Security Advisory",       "repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6901

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",       "nvd_url": null,

Network accessline 6901

"repository": "openclaw/openclaw",       "github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",       "nvd_url": null,

Network accessline 6902

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6902

"github_advisory_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc",

Network accessline 6933

"published": "2026-06-23T19:17:11.713",       "references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6933

"published": "2026-06-23T19:17:11.713",       "references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6934

"references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"       ],

Network accessline 6934

"references": [         "https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"       ],

Network accessline 6935

"https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6935

"https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3q"

Network accessline 6936

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6936

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6937

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",       "exploitability_score": "high",

Network accessline 6937

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",       "exploitability_score": "high",

Network accessline 6938

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6938

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55249",

Network accessline 6966

"published": "2026-06-23T16:17:06.040",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6966

"published": "2026-06-23T16:17:06.040",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6967

"references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",         "https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6967

"references": [         "https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",         "https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6968

"https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6968

"https://github.com/nanocoai/nanoclaw/commit/0eef8fafdd7c475ab5fd8d37ea566a81e74cd834",

Network accessline 6969

"https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6969

"https://github.com/nanocoai/nanoclaw/pull/2566",

Network accessline 6970

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-forged-channel-approval-callback"

Network accessline 6970

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-forged-channel-approval-callback"

Network accessline 6971

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 6971

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 6972

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",       "exploitability_score": "medium",

Network accessline 6972

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",       "exploitability_score": "medium",

Network accessline 6973

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 6973

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694",

Network accessline 7001

"published": "2026-06-23T16:17:05.887",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7001

"published": "2026-06-23T16:17:05.887",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7002

"references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",         "https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7002

"references": [         "https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",         "https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7003

"https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7003

"https://github.com/nanocoai/nanoclaw/commit/ac37ecbfd6b9d14fdfa1598a6412a8ffdbeaef45",

Network accessline 7004

"https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7004

"https://github.com/nanocoai/nanoclaw/pull/2720",

Network accessline 7005

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unauthorized-create-agent-system-action"

Network accessline 7005

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unauthorized-create-agent-system-action"

Network accessline 7006

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7006

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7007

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",       "exploitability_score": "medium",

Network accessline 7007

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",       "exploitability_score": "medium",

Network accessline 7008

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7008

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693",

Network accessline 7036

"published": "2026-06-23T16:17:05.753",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7036

"published": "2026-06-23T16:17:05.753",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7037

"references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",         "https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7037

"references": [         "https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",         "https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7038

"https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7038

"https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae",

Network accessline 7039

"https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7039

"https://github.com/nanocoai/nanoclaw/pull/2468",

Network accessline 7040

"https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles"

Network accessline 7040

"https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles"

Network accessline 7041

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7041

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7042

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",       "exploitability_score": "medium",

Network accessline 7042

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",       "exploitability_score": "medium",

Network accessline 7043

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7043

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692",

Network accessline 7071

"published": "2026-06-23T16:17:05.397",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7071

"published": "2026-06-23T16:17:05.397",       "references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7072

"references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",         "https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7072

"references": [         "https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",         "https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7073

"https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7073

"https://github.com/nanocoai/nanoclaw/commit/6227bd1a5b016fb1eb76411bb6681b4c924a51a0",

Network accessline 7074

"https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7074

"https://github.com/nanocoai/nanoclaw/pull/2478",

Network accessline 7075

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unverified-approval-response-handler"

Network accessline 7075

"https://www.vulncheck.com/advisories/nanoclaw-privilege-escalation-via-unverified-approval-response-handler"

Network accessline 7076

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7076

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7077

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",       "exploitability_score": "medium",

Network accessline 7077

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",       "exploitability_score": "medium",

Network accessline 7078

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7078

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402",

Network accessline 7110

"published": "2026-06-16T19:17:05.023",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7110

"published": "2026-06-16T19:17:05.023",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7111

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7111

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7112

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7112

"https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2",

Network accessline 7113

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7113

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing"

Network accessline 7114

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7114

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7115

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",       "exploitability_score": "high",

Network accessline 7115

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",       "exploitability_score": "high",

Network accessline 7116

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7116

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53866",

Network accessline 7147

"published": "2026-06-16T19:17:04.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7147

"published": "2026-06-16T19:17:04.890",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7148

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7148

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7149

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7149

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rx78-29qr-5hq8",

Network accessline 7150

"https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7150

"https://www.vulncheck.com/advisories/openclaw-arbitrary-command-execution-via-workspace-derived-service-path"

Network accessline 7151

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Network accessline 7151

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Network accessline 7152

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",       "exploitability_score": "high",

Network accessline 7152

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",       "exploitability_score": "high",

Network accessline 7153

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Network accessline 7153

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53865",

Access to secretsline 7173
```
[Credential-related source omitted]
```
Access to secretsline 7173
```
[Credential-related source omitted]
```

Network accessline 7184

"published": "2026-06-16T19:17:04.760",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7184

"published": "2026-06-16T19:17:04.760",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7185

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",         "https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7185

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",         "https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7186

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7186

"https://github.com/openclaw/openclaw/security/advisories/GHSA-ccwh-wwpp-6wg5",

Network accessline 7187

"https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7187

"https://www.vulncheck.com/advisories/openclaw-insufficient-environment-variable-sanitization-in-node-js-control-variables"

Network accessline 7188

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7188

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7189

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",       "exploitability_score": "high",

Network accessline 7189

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",       "exploitability_score": "high",

Network accessline 7190

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7190

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53864",

Network accessline 7222

"published": "2026-06-16T19:17:04.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7222

"published": "2026-06-16T19:17:04.633",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7223

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",         "https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7223

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",         "https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7224

"https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7224

"https://github.com/openclaw/openclaw/security/advisories/GHSA-985f-72mj-8gf7",

Network accessline 7225

"https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7225

"https://www.vulncheck.com/advisories/openclaw-unvalidated-group-id-acceptance-in-tool-group-policy"

Network accessline 7226

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7226

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7227

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",       "exploitability_score": "high",

Network accessline 7227

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",       "exploitability_score": "high",

Network accessline 7228

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7228

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53863",

Network accessline 7260

"published": "2026-06-16T19:17:04.160",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7260

"published": "2026-06-16T19:17:04.160",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7261

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",         "https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7261

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",         "https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7262

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7262

"https://github.com/openclaw/openclaw/security/advisories/GHSA-9v8j-9c9g-w66c",

Network accessline 7263

"https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7263

"https://www.vulncheck.com/advisories/openclaw-bootstrap-token-replay-via-pending-pairing-scope-widening"

Network accessline 7264

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7264

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7265

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",       "exploitability_score": "medium",

Network accessline 7265

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",       "exploitability_score": "medium",

Network accessline 7266

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7266

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53862",

Network accessline 7296

"published": "2026-06-16T19:17:04.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7296

"published": "2026-06-16T19:17:04.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7297

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7297

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7298

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7298

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6c",

Network accessline 7299

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7299

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posix-inline-flags-on-macos"

Network accessline 7300

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7300

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7301

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",       "exploitability_score": "medium",

Network accessline 7301

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",       "exploitability_score": "medium",

Network accessline 7302

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7302

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53861",

Network accessline 7332

"published": "2026-06-16T19:17:03.573",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7332

"published": "2026-06-16T19:17:03.573",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7333

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",         "https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7333

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",         "https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7334

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7334

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8j37-5w68-wj2g",

Network accessline 7335

"https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7335

"https://www.vulncheck.com/advisories/openclaw-sender-policy-bypass-via-mutable-conversation-identifiers-in-bluebubbles"

Network accessline 7336

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7336

],       "cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7337

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",       "exploitability_score": "medium",

Network accessline 7337

"cvss_score": 4.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",       "exploitability_score": "medium",

Network accessline 7338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7338

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53860",

Network accessline 7369

"published": "2026-06-16T19:17:03.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7369

"published": "2026-06-16T19:17:03.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7370

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",         "https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7370

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",         "https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7371

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7371

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gxg4-2rrr-jhc7",

Network accessline 7372

"https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7372

"https://www.vulncheck.com/advisories/openclaw-hostname-validation-bypass-via-trailing-dot-inconsistency"

Network accessline 7373

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Network accessline 7373

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Network accessline 7374

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",       "exploitability_score": "medium",

Network accessline 7374

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",       "exploitability_score": "medium",

Network accessline 7375

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Network accessline 7375

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53859",

Access to secretsline 7395
```
[Credential-related source omitted]
```
Access to secretsline 7395
```
[Credential-related source omitted]
```

Network accessline 7404

"published": "2026-06-16T19:17:03.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7404

"published": "2026-06-16T19:17:03.310",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7405

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7405

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7406

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7406

"https://github.com/openclaw/openclaw/security/advisories/GHSA-wc84-j36w-pw4x",

Network accessline 7407

"https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7407

"https://www.vulncheck.com/advisories/openclaw-arbitrary-runtime-dependency-loading-via-state-directory-environment-variable"

Network accessline 7408

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7408

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7409

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",       "exploitability_score": "medium",

Network accessline 7409

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",       "exploitability_score": "medium",

Network accessline 7410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7410

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53858",

Network accessline 7439

"published": "2026-06-16T19:17:03.180",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7439

"published": "2026-06-16T19:17:03.180",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7440

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",         "https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7440

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",         "https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7441

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7441

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69",

Network accessline 7442

"https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7442

"https://www.vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy"

Network accessline 7443

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7443

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7444

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",       "exploitability_score": "high",

Network accessline 7444

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",       "exploitability_score": "high",

Network accessline 7445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7445

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53857",

Network accessline 7474

"published": "2026-06-16T19:17:03.047",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7474

"published": "2026-06-16T19:17:03.047",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7475

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",         "https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7475

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",         "https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7476

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7476

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rwp6-7w3q-75fq",

Network accessline 7477

"https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7477

"https://www.vulncheck.com/advisories/openclaw-insecure-file-permissions-in-config-recovery-via-openclaw-json"

Network accessline 7478

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7478

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7479

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",       "exploitability_score": "medium",

Network accessline 7479

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",       "exploitability_score": "medium",

Network accessline 7480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7480

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53856",

Network accessline 7509

"published": "2026-06-16T19:17:02.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7509

"published": "2026-06-16T19:17:02.910",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",         "https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7510

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",         "https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7511

"https://github.com/openclaw/openclaw/security/advisories/GHSA-5cj2-3jr2-5h77",

Network accessline 7512

"https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7512

"https://www.vulncheck.com/advisories/openclaw-shell-positional-parameters-bypass-in-inline-eval-checks"

Network accessline 7513

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7513

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7514

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",       "exploitability_score": "high",

Network accessline 7514

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",       "exploitability_score": "high",

Network accessline 7515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7515

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53855",

Network accessline 7544

"published": "2026-06-16T19:17:02.780",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7544

"published": "2026-06-16T19:17:02.780",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7545

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-

Network accessline 7545

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-

Network accessline 7546

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7546

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4hpg-mp64-x7xq",

Network accessline 7547

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-commands"

Network accessline 7547

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-ownerallowfrom-wildcard-inheritance-in-internal-webchat-commands"

Network accessline 7548

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7548

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7549

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",       "exploitability_score": "medium",

Network accessline 7549

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",       "exploitability_score": "medium",

Network accessline 7550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7550

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53854",

Network accessline 7582

"published": "2026-06-16T19:17:02.650",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7582

"published": "2026-06-16T19:17:02.650",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7583

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",         "https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7583

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",         "https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7584

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7584

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v",

Network accessline 7585

"https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7585

"https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos"

Network accessline 7586

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7586

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7587

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",       "exploitability_score": "high",

Network accessline 7587

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",       "exploitability_score": "high",

Network accessline 7588

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7588

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53853",

Network accessline 7620

"published": "2026-06-16T19:17:02.510",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7620

"published": "2026-06-16T19:17:02.510",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7621

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7621

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7622

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7622

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8mg9-j9cf-54cj",

Network accessline 7623

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7623

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-empty-scope-device-re-pairing"

Network accessline 7624

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7624

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7625

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",       "exploitability_score": "medium",

Network accessline 7625

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",       "exploitability_score": "medium",

Network accessline 7626

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7626

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53852",

Network accessline 7658

"published": "2026-06-16T19:17:02.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7658

"published": "2026-06-16T19:17:02.327",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7659

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",         "https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7659

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",         "https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7660

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7660

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8",

Network accessline 7661

"https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7661

"https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass"

Network accessline 7662

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7662

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7663

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",       "exploitability_score": "high",

Network accessline 7663

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",       "exploitability_score": "high",

Network accessline 7664

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7664

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53851",

Network accessline 7696

"published": "2026-06-16T19:17:02.183",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7696

"published": "2026-06-16T19:17:02.183",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7697

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",         "https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7697

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",         "https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7698

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7698

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mpc8-jxjh-qpgh",

Network accessline 7699

"https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7699

"https://www.vulncheck.com/advisories/openclaw-control-scope-enforcement-bypass-in-focus-command"

Network accessline 7700

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7700

],       "cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7701

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",       "exploitability_score": "high",

Network accessline 7701

"cvss_score": 5.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",       "exploitability_score": "high",

Network accessline 7702

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7702

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53850",

Network accessline 7732

"published": "2026-06-16T19:17:02.053",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7732

"published": "2026-06-16T19:17:02.053",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7733

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7733

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7734

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7734

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cw4q-gqg5-g38h",

Network accessline 7735

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7735

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-discord-display-names-in-allowfrom"

Network accessline 7736

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7736

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7737

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",       "exploitability_score": "high",

Network accessline 7737

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",       "exploitability_score": "high",

Network accessline 7738

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7738

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53849",

Network accessline 7769

"published": "2026-06-16T19:17:01.920",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7769

"published": "2026-06-16T19:17:01.920",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7770

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",         "https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7770

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",         "https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7771

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7771

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6",

Network accessline 7772

"https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7772

"https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers"

Network accessline 7773

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7773

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7774

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",       "exploitability_score": "medium",

Network accessline 7774

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",       "exploitability_score": "medium",

Network accessline 7775

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7775

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53848",

Network accessline 7805

"published": "2026-06-16T19:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7805

"published": "2026-06-16T19:17:01.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7806

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7806

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7807

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7807

"https://github.com/openclaw/openclaw/security/advisories/GHSA-x629-46cc-7xgw",

Network accessline 7808

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7808

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-active-memory-write-scope"

Network accessline 7809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Network accessline 7809

],       "cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Network accessline 7810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",       "exploitability_score": "medium",

Network accessline 7810

"cvss_score": 5.4,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",       "exploitability_score": "medium",

Network accessline 7811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Network accessline 7811

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53847",

Access to secretsline 7831
```
[Credential-related source omitted]
```
Access to secretsline 7831
```
[Credential-related source omitted]
```

Network accessline 7843

"published": "2026-06-16T19:17:01.653",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7843

"published": "2026-06-16T19:17:01.653",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7844

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7844

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7845

"https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7845

"https://github.com/openclaw/openclaw/security/advisories/GHSA-24vr-rprv-67rf",

Network accessline 7846

"https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7846

"https://www.vulncheck.com/advisories/openclaw-arbitrary-package-manager-execution-via-workspace-env-npm-execpath"

Network accessline 7847

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7847

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7848

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",       "exploitability_score": "high",

Network accessline 7848

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",       "exploitability_score": "high",

Network accessline 7849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7849

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53846",

Network accessline 7879

"published": "2026-06-16T19:17:01.520",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7879

"published": "2026-06-16T19:17:01.520",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7880

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",         "https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7880

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",         "https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7881

"https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7881

"https://github.com/openclaw/openclaw/security/advisories/GHSA-68xw-r643-9p5w",

Network accessline 7882

"https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7882

"https://www.vulncheck.com/advisories/openclaw-skill-command-dispatch-hook-bypass-via-before-tool-call-hook-skipping"

Network accessline 7883

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7883

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7884

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",       "exploitability_score": "high",

Network accessline 7884

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",       "exploitability_score": "high",

Network accessline 7885

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7885

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53845",

Network accessline 7917

"published": "2026-06-16T19:17:01.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7917

"published": "2026-06-16T19:17:01.390",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",         "https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7918

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",         "https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7919

"https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324",

Network accessline 7920

"https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7920

"https://www.vulncheck.com/advisories/openclaw-session-visibility-check-bypass-in-shared-memory-search"

Network accessline 7921

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7921

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7922

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",       "exploitability_score": "medium",

Network accessline 7922

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",       "exploitability_score": "medium",

Network accessline 7923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7923

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53844",

Network accessline 7954

"published": "2026-06-16T19:17:01.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7954

"published": "2026-06-16T19:17:01.257",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7955

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",         "https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7955

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",         "https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7956

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7956

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q99w-vh6v-q3v7",

Network accessline 7957

"https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7957

"https://www.vulncheck.com/advisories/openclaw-node-token-revocation-bypass-via-pairing-scoped-device-session"

Network accessline 7958

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Network accessline 7958

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Network accessline 7959

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",       "exploitability_score": "high",

Network accessline 7959

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",       "exploitability_score": "high",

Network accessline 7960

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Network accessline 7960

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53843",

Access to secretsline 7980
```
[Credential-related source omitted]
```
Access to secretsline 7980
```
[Credential-related source omitted]
```

Network accessline 7992

"published": "2026-06-16T19:17:01.127",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7992

"published": "2026-06-16T19:17:01.127",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7993

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7993

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7994

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7994

"https://github.com/openclaw/openclaw/security/advisories/GHSA-fq9j-vw4w-fr6v",

Network accessline 7995

"https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7995

"https://www.vulncheck.com/advisories/openclaw-arbitrary-python-runtime-execution-via-cloudsdk-python-environment-variable"

Network accessline 7996

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 7996

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 7997

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",       "exploitability_score": "high",

Network accessline 7997

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",       "exploitability_score": "high",

Network accessline 7998

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 7998

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53842",

Network accessline 8030

"published": "2026-06-16T19:17:00.993",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8030

"published": "2026-06-16T19:17:00.993",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8031

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",         "https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8031

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",         "https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8032

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8032

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w9hf-3pp7-pvxv",

Network accessline 8033

"https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8033

"https://www.vulncheck.com/advisories/openclaw-cross-site-scripting-via-unsafe-markdown-links-in-exported-session-html"

Network accessline 8034

],       "cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8034

],       "cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8035

"cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",       "exploitability_score": "medium",

Network accessline 8035

"cvss_score": 6.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",       "exploitability_score": "medium",

Network accessline 8036

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8036

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53841",

Network accessline 8068

"published": "2026-06-16T19:17:00.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8068

"published": "2026-06-16T19:17:00.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8069

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",         "https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8069

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",         "https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8070

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8070

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rjxq-qqhf-8hwh",

Network accessline 8071

"https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8071

"https://www.vulncheck.com/advisories/openclaw-custom-header-leakage-via-mcp-streamable-http-cross-origin-redirects"

Network accessline 8072

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8072

],       "cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8073

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",       "exploitability_score": "high",

Network accessline 8073

"cvss_score": 7.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",       "exploitability_score": "high",

Network accessline 8074

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8074

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53840",

Network accessline 8103

"published": "2026-06-12T22:16:55.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8103

"published": "2026-06-12T22:16:55.863",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",         "https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8104

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",         "https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8105

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77q5-rr5v-x43q",

Network accessline 8106

"https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8106

"https://www.vulncheck.com/advisories/openclaw-hostname-prefix-matching-bypass-in-trusted-retry-endpoint-validation"

Network accessline 8107

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8107

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8108

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",       "exploitability_score": "medium",

Network accessline 8108

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",       "exploitability_score": "medium",

Network accessline 8109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8109

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53839",

Network accessline 8138

"published": "2026-06-12T22:16:55.723",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8138

"published": "2026-06-12T22:16:55.723",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",         "https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8139

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",         "https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8140

"https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm",

Network accessline 8141

"https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8141

"https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection"

Network accessline 8142

],       "cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8142

],       "cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8143

"cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",       "exploitability_score": "high",

Network accessline 8143

"cvss_score": 9.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",       "exploitability_score": "high",

Network accessline 8144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8144

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53838",

Network accessline 8173

"published": "2026-06-12T22:16:55.567",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8173

"published": "2026-06-12T22:16:55.567",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",         "https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8174

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",         "https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8175

"https://github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmh",

Network accessline 8176

"https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8176

"https://www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlers"

Network accessline 8177

],       "cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8177

],       "cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8178

"cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",       "exploitability_score": "low",

Network accessline 8178

"cvss_score": 3.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",       "exploitability_score": "low",

Network accessline 8179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8179

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53837",

Network accessline 8208

"published": "2026-06-12T22:16:55.413",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8208

"published": "2026-06-12T22:16:55.413",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8209

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",         "https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8210

"https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589",

Network accessline 8211

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8211

"https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-encoded-command-aliases"

Network accessline 8212

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8212

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8213

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",       "exploitability_score": "high",

Network accessline 8213

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",       "exploitability_score": "high",

Network accessline 8214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8214

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53836",

Network accessline 8243

"published": "2026-06-12T22:16:55.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8243

"published": "2026-06-12T22:16:55.237",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",         "https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8244

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",         "https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8245

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3wqp-prf6-2m72",

Network accessline 8246

"https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8246

"https://www.vulncheck.com/advisories/openclaw-config-write-enforcement-bypass-in-feishu-dynamic-agent-bindings"

Network accessline 8247

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8247

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8248

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",       "exploitability_score": "high",

Network accessline 8248

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",       "exploitability_score": "high",

Network accessline 8249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8249

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53835",

Network accessline 8278

"published": "2026-06-12T22:16:55.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8278

"published": "2026-06-12T22:16:55.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8279

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8280

"https://github.com/openclaw/openclaw/security/advisories/GHSA-77pv-3w4q-vrj5",

Network accessline 8281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8281

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-qqbot-pre-dispatch-slash-commands"

Network accessline 8282

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8282

],       "cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8283

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",       "exploitability_score": "high",

Network accessline 8283

"cvss_score": 7.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",       "exploitability_score": "high",

Network accessline 8284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8284

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53834",

Network accessline 8313

"published": "2026-06-12T22:16:54.947",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8313

"published": "2026-06-12T22:16:54.947",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8314

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8315

"https://github.com/openclaw/openclaw/security/advisories/GHSA-jvm4-4j77-39p6",

Network accessline 8316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8316

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-qqbot-streaming-command"

Network accessline 8317

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8317

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8318

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",       "exploitability_score": "medium",

Network accessline 8318

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",       "exploitability_score": "medium",

Network accessline 8319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8319

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53833",

Network accessline 8348

"published": "2026-06-12T22:16:54.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8348

"published": "2026-06-12T22:16:54.790",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",         "https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8349

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",         "https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8350

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rggc-m335-3wvj",

Network accessline 8351

"https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8351

"https://www.vulncheck.com/advisories/openclaw-identity-header-forgery-via-trusted-proxy-configuration"

Network accessline 8352

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8352

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8353

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",       "exploitability_score": "medium",

Network accessline 8353

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",       "exploitability_score": "medium",

Network accessline 8354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8354

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53832",

Network accessline 8383

"published": "2026-06-12T22:16:54.643",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8383

"published": "2026-06-12T22:16:54.643",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8384

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8385

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79",

Network accessline 8386

"https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8386

"https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist"

Network accessline 8387

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8387

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8388

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",       "exploitability_score": "high",

Network accessline 8388

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",       "exploitability_score": "high",

Network accessline 8389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8389

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53831",

Network accessline 8418

"published": "2026-06-12T22:16:54.490",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8418

"published": "2026-06-12T22:16:54.490",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",         "https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8419

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",         "https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8420

"https://github.com/openclaw/openclaw/security/advisories/GHSA-275c-xpvc-jgfw",

Network accessline 8421

"https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8421

"https://www.vulncheck.com/advisories/openclaw-webhook-secret-revocation-bypass-via-secrets-reload"

Network accessline 8422

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8422

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8423

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",       "exploitability_score": "medium",

Network accessline 8423

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",       "exploitability_score": "medium",

Network accessline 8424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8424

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53830",

Network accessline 8453

"published": "2026-06-12T22:16:54.347",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8453

"published": "2026-06-12T22:16:54.347",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",         "https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8454

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",         "https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8455

"https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9",

Network accessline 8456

"https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8456

"https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display"

Network accessline 8457

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8457

],       "cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8458

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",       "exploitability_score": "high",

Network accessline 8458

"cvss_score": 8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",       "exploitability_score": "high",

Network accessline 8459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8459

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53829",

Network accessline 8488

"published": "2026-06-12T22:16:54.203",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8488

"published": "2026-06-12T22:16:54.203",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",         "https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8489

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",         "https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8490

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5",

Network accessline 8491

"https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8491

"https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement"

Network accessline 8492

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8492

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8493

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",       "exploitability_score": "high",

Network accessline 8493

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",       "exploitability_score": "high",

Network accessline 8494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8494

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53828",

Network accessline 8523

"published": "2026-06-12T22:16:54.060",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8523

"published": "2026-06-12T22:16:54.060",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",         "https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding

Network accessline 8524

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",         "https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding

Network accessline 8525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8525

"https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm",

Network accessline 8526

"https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding"

Network accessline 8526

"https://www.vulncheck.com/advisories/openclaw-credential-exposure-via-model-supplied-loopback-urls-in-message-action-forwarding"

Network accessline 8527

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",

Network accessline 8527

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",

Network accessline 8528

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",

Network accessline 8528

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",

Network accessline 8529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 8529

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53827",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 8558

"published": "2026-06-12T22:16:53.913",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8558

"published": "2026-06-12T22:16:53.913",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",         "https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8559

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",         "https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8560

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c",

Network accessline 8561

"https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8561

"https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn"

Network accessline 8562

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8562

],       "cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8563

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",       "exploitability_score": "high",

Network accessline 8563

"cvss_score": 4.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",       "exploitability_score": "high",

Network accessline 8564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8564

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53826",

Network accessline 8593

"published": "2026-06-12T22:16:53.767",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8593

"published": "2026-06-12T22:16:53.767",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8594

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8595

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p2fh-f5fc-44hr",

Network accessline 8596

"https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8596

"https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-memory-wiki-ingest-with-operator-write-scope"

Network accessline 8597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8597

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",       "exploitability_score": "high",

Network accessline 8598

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",       "exploitability_score": "high",

Network accessline 8599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8599

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53825",

Network accessline 8628

"published": "2026-06-12T22:16:53.613",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8628

"published": "2026-06-12T22:16:53.613",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",         "https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8629

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",         "https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8630

"https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h",

Network accessline 8631

"https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8631

"https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay"

Network accessline 8632

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8632

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8633

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",       "exploitability_score": "medium",

Network accessline 8633

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",       "exploitability_score": "medium",

Network accessline 8634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8634

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53824",

Network accessline 8663

"published": "2026-06-12T22:16:53.463",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8663

"published": "2026-06-12T22:16:53.463",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8664

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8665

"https://github.com/openclaw/openclaw/security/advisories/GHSA-c29c-2q9c-pc86",

Network accessline 8666

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8666

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-slack-display-names-in-allowfrom"

Network accessline 8667

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8667

],       "cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8668

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",       "exploitability_score": "high",

Network accessline 8668

"cvss_score": 8.1,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",       "exploitability_score": "high",

Network accessline 8669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8669

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53823",

Network accessline 8698

"published": "2026-06-12T22:16:53.317",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8698

"published": "2026-06-12T22:16:53.317",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",         "https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8699

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",         "https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8700

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698",

Network accessline 8701

"https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8701

"https://www.vulncheck.com/advisories/openclaw-command-argument-modification-via-shell-wrapper-between-approval-and-execution"

Network accessline 8702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8702

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",       "exploitability_score": "high",

Network accessline 8703

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",       "exploitability_score": "high",

Network accessline 8704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8704

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53822",

Network accessline 8733

"published": "2026-06-12T22:16:53.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8733

"published": "2026-06-12T22:16:53.173",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",         "https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8734

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",         "https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8735

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr",

Network accessline 8736

"https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8736

"https://www.vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket"

Network accessline 8737

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8737

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8738

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",       "exploitability_score": "high",

Network accessline 8738

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",       "exploitability_score": "high",

Network accessline 8739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8739

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53821",

Network accessline 8768

"published": "2026-06-12T22:16:53.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8768

"published": "2026-06-12T22:16:53.027",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",         "https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8769

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",         "https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8770

"https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf",

Network accessline 8771

"https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8771

"https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn"

Network accessline 8772

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Network accessline 8772

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Network accessline 8773

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",       "exploitability_score": "medium",

Network accessline 8773

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",       "exploitability_score": "medium",

Network accessline 8774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Network accessline 8774

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53820",

Access to secretsline 8794
```
[Credential-related source omitted]
```
Access to secretsline 8794
```
[Credential-related source omitted]
```

Network accessline 8803

"published": "2026-06-11T21:16:24.227",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8803

"published": "2026-06-11T21:16:24.227",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8804

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8805

"https://github.com/openclaw/openclaw/security/advisories/GHSA-8wg3-5mcm-fjq8",

Network accessline 8806

"https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8806

"https://www.vulncheck.com/advisories/openclaw-arbitrary-homebrew-executable-execution-via-workspace-env-override"

Network accessline 8807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8807

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",       "exploitability_score": "high",

Network accessline 8808

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",       "exploitability_score": "high",

Network accessline 8809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8809

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53819",

Network accessline 8838

"published": "2026-06-11T21:16:24.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8838

"published": "2026-06-11T21:16:24.090",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",         "https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8839

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",         "https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8840

"https://github.com/openclaw/openclaw/security/advisories/GHSA-rj6p-xmxr-qj4h",

Network accessline 8841

"https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8841

"https://www.vulncheck.com/advisories/openclaw-owner-only-tool-policy-bypass-via-mcp-loopback"

Network accessline 8842

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8842

],       "cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8843

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",       "exploitability_score": "medium",

Network accessline 8843

"cvss_score": 6.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",       "exploitability_score": "medium",

Network accessline 8844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8844

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53818",

Network accessline 8873

"published": "2026-06-11T21:16:23.960",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8873

"published": "2026-06-11T21:16:23.960",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",         "https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8874

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",         "https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8875

"https://github.com/openclaw/openclaw/security/advisories/GHSA-chr9-m4q2-76hw",

Network accessline 8876

"https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8876

"https://www.vulncheck.com/advisories/openclaw-control-ui-locality-spoofing-in-device-pairing"

Network accessline 8877

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8877

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8878

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",       "exploitability_score": "high",

Network accessline 8878

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",       "exploitability_score": "high",

Network accessline 8879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8879

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53817",

Network accessline 8908

"published": "2026-06-11T21:16:23.830",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8908

"published": "2026-06-11T21:16:23.830",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",         "https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8909

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",         "https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8910

"https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4",

Network accessline 8911

"https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8911

"https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-node"

Network accessline 8912

],       "cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8912

],       "cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8913

"cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",       "exploitability_score": "high",

Network accessline 8913

"cvss_score": 7.2,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",       "exploitability_score": "high",

Network accessline 8914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8914

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53816",

Network accessline 8943

"published": "2026-06-11T21:16:23.697",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8943

"published": "2026-06-11T21:16:23.697",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",         "https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8944

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",         "https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8945

"https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r",

Network accessline 8946

"https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8946

"https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions"

Network accessline 8947

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8947

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8948

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",       "exploitability_score": "medium",

Network accessline 8948

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",       "exploitability_score": "medium",

Network accessline 8949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8949

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53815",

Network accessline 8978

"published": "2026-06-11T21:16:23.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8978

"published": "2026-06-11T21:16:23.570",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8979

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8980

"https://github.com/openclaw/openclaw/security/advisories/GHSA-6fvr-66p3-3qj4",

Network accessline 8981

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8981

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-hook-triggered-cli-mcp-tool-authority"

Network accessline 8982

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 8982

],       "cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 8983

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",       "exploitability_score": "high",

Network accessline 8983

"cvss_score": 8.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",       "exploitability_score": "high",

Network accessline 8984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 8984

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53814",

Network accessline 9013

"published": "2026-06-11T21:16:23.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9013

"published": "2026-06-11T21:16:23.440",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9014

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9015

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v8cx-933x-r976",

Network accessline 9016

"https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9016

"https://www.vulncheck.com/advisories/openclaw-arbitrary-artifact-loading-via-fake-package-root-resolution"

Network accessline 9017

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9017

],       "cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9018

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",       "exploitability_score": "high",

Network accessline 9018

"cvss_score": 7.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",       "exploitability_score": "high",

Network accessline 9019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9019

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53813",

Network accessline 9048

"published": "2026-06-11T21:16:23.303",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9048

"published": "2026-06-11T21:16:23.303",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",         "https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9049

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",         "https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9050

"https://github.com/openclaw/openclaw/security/advisories/GHSA-2hfg-4fh4-qp7f",

Network accessline 9051

"https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9051

"https://www.vulncheck.com/advisories/openclaw-private-network-navigation-bypass-via-browser-act-interactions"

Network accessline 9052

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",

Network accessline 9052

],       "cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",

Network accessline 9053

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",

Network accessline 9053

"cvss_score": 7.7,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",

Network accessline 9054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 9054

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53812",       "exploitability_score": "high",       "exploitability_rationale": "High CVSS score (7.7); network accessible; SSRF affects agents making external requests",

Network accessline 9083

"published": "2026-06-11T21:16:23.167",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9083

"published": "2026-06-11T21:16:23.167",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9084

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",         "https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9085

"https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6",

Network accessline 9086

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9086

"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom"

Network accessline 9087

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9087

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9088

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",       "exploitability_score": "high",

Network accessline 9088

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",       "exploitability_score": "high",

Network accessline 9089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9089

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53811",

Network accessline 9118

"published": "2026-06-11T21:16:23.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9118

"published": "2026-06-11T21:16:23.030",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9119

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",         "https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9120

"https://github.com/openclaw/openclaw/security/advisories/GHSA-v6r2-jh58-xx6w",

Network accessline 9121

"https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9121

"https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unscanned-marketplace-runtime-extension-metadata"

Network accessline 9122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9122

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",       "exploitability_score": "high",

Network accessline 9123

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",       "exploitability_score": "high",

Network accessline 9124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9124

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53810",

Network accessline 9153

"published": "2026-06-11T21:16:22.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9153

"published": "2026-06-11T21:16:22.857",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",         "https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9154

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",         "https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9155

"https://github.com/openclaw/openclaw/security/advisories/GHSA-p39j-x9h5-q66m",

Network accessline 9156

"https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9156

"https://www.vulncheck.com/advisories/openclaw-provider-alias-confusion-in-embedded-runner-policy"

Network accessline 9157

],       "cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9157

],       "cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9158

"cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",       "exploitability_score": "low",

Network accessline 9158

"cvss_score": 3.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",       "exploitability_score": "low",

Network accessline 9159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9159

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53809",

Network accessline 9188

"published": "2026-06-11T21:16:22.717",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9188

"published": "2026-06-11T21:16:22.717",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",         "https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9189

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",         "https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9190

"https://github.com/openclaw/openclaw/security/advisories/GHSA-cqwv-9qjx-vxw2",

Network accessline 9191

"https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9191

"https://www.vulncheck.com/advisories/openclaw-approval-policy-bypass-in-skill-workshop-apply-flow"

Network accessline 9192

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9192

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9193

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",       "exploitability_score": "medium",

Network accessline 9193

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",       "exploitability_score": "medium",

Network accessline 9194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9194

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53808",

Network accessline 9223

"published": "2026-06-11T21:16:22.580",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9223

"published": "2026-06-11T21:16:22.580",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9224

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",         "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9225

"https://github.com/openclaw/openclaw/security/advisories/GHSA-w5ww-7chg-mxcq",

Network accessline 9226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9226

"https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-telegram-interactive-callbacks-via-commands-allowfrom"

Network accessline 9227

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9227

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9228

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",       "exploitability_score": "high",

Network accessline 9228

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",       "exploitability_score": "high",

Network accessline 9229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9229

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53807",

Network accessline 9258

"published": "2026-06-11T21:16:22.443",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9258

"published": "2026-06-11T21:16:22.443",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",         "https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9259

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",         "https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9260

"https://github.com/openclaw/openclaw/security/advisories/GHSA-vxx3-6hc9-7cc3",

Network accessline 9261

"https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9261

"https://www.vulncheck.com/advisories/openclaw-shell-option-parsing-bypass-in-exec-revalidation"

Network accessline 9262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9262

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",       "exploitability_score": "high",

Network accessline 9263

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",       "exploitability_score": "high",

Network accessline 9264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9264

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53806",

Network accessline 9292

"published": "2026-06-07T22:16:22.547",       "references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9292

"published": "2026-06-07T22:16:22.547",       "references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9293

"references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",         "https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9293

"references": [         "https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",         "https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9294

"https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9294

"https://gist.github.com/YLChen-007/7951b3dc39193fb675914cc5d8b672fa",

Network accessline 9295

"https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9295

"https://gist.github.com/YLChen-007/c2d162e9c8d39584223683cdcba98607",

Network accessline 9296
```
"https://vuldb.com/cve/CVE-2026-11461"
```
Network accessline 9296
```
"https://vuldb.com/cve/CVE-2026-11461"
```

Network accessline 9297

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9297

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9298

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",       "exploitability_score": "medium",

Network accessline 9298

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",       "exploitability_score": "medium",

Network accessline 9299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9299

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11461",

Network accessline 9327

"published": "2026-06-02T02:16:15.233",       "references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9327

"published": "2026-06-02T02:16:15.233",       "references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9328

"references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",         "https://vuldb.com/cve/CVE-2026-10548",

Network accessline 9328

"references": [         "https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",         "https://vuldb.com/cve/CVE-2026-10548",

Network accessline 9329

"https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9329

"https://gist.github.com/YLChen-007/caf38652afeccbbd53a9d77152b6198d",

Network accessline 9330
```
"https://vuldb.com/cve/CVE-2026-10548",
```
Network accessline 9330
```
"https://vuldb.com/cve/CVE-2026-10548",
```
Network accessline 9331
```
"https://vuldb.com/submit/822026"
```
Network accessline 9331
```
"https://vuldb.com/submit/822026"
```

Network accessline 9332

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9332

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9333

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",       "exploitability_score": "medium",

Network accessline 9333

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",       "exploitability_score": "medium",

Network accessline 9334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9334

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10548",

Network accessline 9362

"published": "2026-06-01T06:16:38.657",       "references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9362

"published": "2026-06-01T06:16:38.657",       "references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9363

"references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",         "https://vuldb.com/cve/CVE-2026-10224",

Network accessline 9363

"references": [         "https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",         "https://vuldb.com/cve/CVE-2026-10224",

Network accessline 9364

"https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9364

"https://gist.github.com/YLChen-007/0304e313d811f187ade93d3b01de0f87",

Network accessline 9365
```
"https://vuldb.com/cve/CVE-2026-10224",
```
Network accessline 9365
```
"https://vuldb.com/cve/CVE-2026-10224",
```
Network accessline 9366
```
"https://vuldb.com/submit/822022"
```
Network accessline 9366
```
"https://vuldb.com/submit/822022"
```

Network accessline 9367

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9367

],       "cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9368

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",       "exploitability_score": "high",

Network accessline 9368

"cvss_score": 5.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",       "exploitability_score": "high",

Network accessline 9369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9369

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10224",

Network accessline 9397

"published": "2026-06-01T06:16:37.900",       "references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9397

"published": "2026-06-01T06:16:37.900",       "references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9398

"references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",         "https://vuldb.com/cve/CVE-2026-10223",

Network accessline 9398

"references": [         "https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",         "https://vuldb.com/cve/CVE-2026-10223",

Network accessline 9399

"https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9399

"https://gist.github.com/YLChen-007/a1fb77ad2488c545a35d0f66356ea7b4",

Network accessline 9400
```
"https://vuldb.com/cve/CVE-2026-10223",
```
Network accessline 9400
```
"https://vuldb.com/cve/CVE-2026-10223",
```
Network accessline 9401
```
"https://vuldb.com/submit/822021"
```
Network accessline 9401
```
"https://vuldb.com/submit/822021"
```

Network accessline 9402

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9402

],       "cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9403

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",       "exploitability_score": "medium",

Network accessline 9403

"cvss_score": 6.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",       "exploitability_score": "medium",

Network accessline 9404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9404

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10223",

Network accessline 9432

"published": "2026-06-01T06:16:36.053",       "references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9432

"published": "2026-06-01T06:16:36.053",       "references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9433

"references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",         "https://vuldb.com/cve/CVE-2026-10222",

Network accessline 9433

"references": [         "https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",         "https://vuldb.com/cve/CVE-2026-10222",

Network accessline 9434

"https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9434

"https://gist.github.com/YLChen-007/7ee2eeaa383b3540d2e8854250c03fb0",

Network accessline 9435
```
"https://vuldb.com/cve/CVE-2026-10222",
```
Network accessline 9435
```
"https://vuldb.com/cve/CVE-2026-10222",
```
Network accessline 9436
```
"https://vuldb.com/submit/822020"
```
Network accessline 9436
```
"https://vuldb.com/submit/822020"
```

Network accessline 9437

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9437

],       "cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9438

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",       "exploitability_score": "high",

Network accessline 9438

"cvss_score": 5.6,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",       "exploitability_score": "high",

Network accessline 9439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9439

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10222",

Network accessline 9467

"published": "2026-06-01T04:16:21.550",       "references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9467

"published": "2026-06-01T04:16:21.550",       "references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9468

"references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",         "https://vuldb.com/cve/CVE-2026-10221",

Network accessline 9468

"references": [         "https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",         "https://vuldb.com/cve/CVE-2026-10221",

Network accessline 9469

"https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9469

"https://gist.github.com/YLChen-007/d343fcfe2c009cd45f56dc475fd5ac03",

Network accessline 9470
```
"https://vuldb.com/cve/CVE-2026-10221",
```
Network accessline 9470
```
"https://vuldb.com/cve/CVE-2026-10221",
```
Network accessline 9471
```
"https://vuldb.com/submit/822019"
```
Network accessline 9471
```
"https://vuldb.com/submit/822019"
```

Network accessline 9472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9472

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",       "exploitability_score": "high",

Network accessline 9473

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",       "exploitability_score": "high",

Network accessline 9474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9474

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10221",

Network accessline 9502

"published": "2026-06-01T04:16:21.260",       "references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9502

"published": "2026-06-01T04:16:21.260",       "references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9503

"references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",         "https://vuldb.com/cve/CVE-2026-10220",

Network accessline 9503

"references": [         "https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",         "https://vuldb.com/cve/CVE-2026-10220",

Network accessline 9504

"https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9504

"https://gist.github.com/YLChen-007/9dd399c6f75b31fa741a613dfd41de08",

Network accessline 9505
```
"https://vuldb.com/cve/CVE-2026-10220",
```
Network accessline 9505
```
"https://vuldb.com/cve/CVE-2026-10220",
```
Network accessline 9506
```
"https://vuldb.com/submit/822018"
```
Network accessline 9506
```
"https://vuldb.com/submit/822018"
```

Network accessline 9507

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9507

],       "cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9508

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",       "exploitability_score": "high",

Network accessline 9508

"cvss_score": 7.3,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",       "exploitability_score": "high",

Network accessline 9509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9509

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10220",

Network accessline 9538

"published": "2026-05-29T16:16:26.377",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9538

"published": "2026-05-29T16:16:26.377",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9539

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9539

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",         "https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9540

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9540

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff",

Network accessline 9541

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9541

"https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route"

Network accessline 9542

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9542

],       "cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9543

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",       "exploitability_score": "high",

Network accessline 9543

"cvss_score": 8.8,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",       "exploitability_score": "high",

Network accessline 9544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9544

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35674",

Network accessline 9573

"published": "2026-05-29T16:16:26.230",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9573

"published": "2026-05-29T16:16:26.230",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9574

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",         "https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9574

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",         "https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9575

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9575

"https://github.com/openclaw/openclaw/security/advisories/GHSA-hcm3-8f6r-6xwg",

Network accessline 9576

"https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9576

"https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-via-browser-debug-export-routes"

Network accessline 9577

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",

Network accessline 9577

],       "cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",

Network accessline 9578

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",

Network accessline 9578

"cvss_score": 6.5,       "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",

Network accessline 9579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 9579

"nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35673",       "exploitability_score": "high",       "exploitability_rationale": "Medium CVSS score (6.5); network accessible; SSRF affects agents making external requests",

Network accessline 9608

"published": "2026-05-29T16:16:26.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9608

"published": "2026-05-29T16:16:26.097",       "references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9609

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",         "https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

Network accessline 9609

"references": [         "https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",         "https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

Network accessline 9610

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9610

"https://github.com/openclaw/openclaw/security/advisories/GHSA-mgq6-vr84-7m2j",

Network accessline 9611

"https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

Network accessline 9611

"https://www.vulncheck.com/advisories/openclaw-qqbot-missing-approver-identity-enforcement-in-native-approval-buttons"

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/handler.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

Network accessline 11

const DEFAULT_FEED_URL =   "https://clawsec.prompt.security/advisories/feed.json";

Network accessline 11

const DEFAULT_FEED_URL =   "https://clawsec.prompt.security/advisories/feed.json";

Network accessline 12

"https://clawsec.prompt.security/advisories/feed.json";

Network accessline 12

"https://clawsec.prompt.security/advisories/feed.json";

Access to secretsline 134
```
[Credential-related source omitted]
```
Access to secretsline 134
```
[Credential-related source omitted]
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/advisory_scope.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/feed.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```
Network accessline 90
```
return globalThis.fetch(url, {
```
Network accessline 90
```
return globalThis.fetch(url, {
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/local_file_io.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/matching.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/state.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/suppression.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/types.ts`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/utils.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/version.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/scripts/discover_skill_catalog.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 7

const DEFAULT_INDEX_URL = "https://clawsec.prompt.security/skills/index.json";

Network accessline 7

const DEFAULT_INDEX_URL = "https://clawsec.prompt.security/skills/index.json";

Network accessline 78

"",       "Behavior:",       "  - Fetches dynamic catalog from CLAWSEC_SKILLS_INDEX_URL (default: https://clawsec.prompt.security/skills/index.json)",

Network accessline 78

"",       "Behavior:",       "  - Fetches dynamic catalog from CLAWSEC_SKILLS_INDEX_URL (default: https://clawsec.prompt.security/skills/index.json)",

Network accessline 79

"Behavior:",       "  - Fetches dynamic catalog from CLAWSEC_SKILLS_INDEX_URL (default: https://clawsec.prompt.security/skills/index.json)",       "  - Falls back to suite-local catalog metadata in skill.json when remote index is unavailabl

Network accessline 79

"Behavior:",       "  - Fetches dynamic catalog from CLAWSEC_SKILLS_INDEX_URL (default: https://clawsec.prompt.security/skills/index.json)",       "  - Falls back to suite-local catalog metadata in skill.json when remote index is unavailabl

Network accessline 80

"  - Fetches dynamic catalog from CLAWSEC_SKILLS_INDEX_URL (default: https://clawsec.prompt.security/skills/index.json)",

Network accessline 80

"  - Fetches dynamic catalog from CLAWSEC_SKILLS_INDEX_URL (default: https://clawsec.prompt.security/skills/index.json)",

Network accessline 200

try {     const response = await globalThis.fetch(indexUrl, {

Network accessline 200

try {     const response = await globalThis.fetch(indexUrl, {

Network accessline 201

const response = await globalThis.fetch(indexUrl, {

Network accessline 201

const response = await globalThis.fetch(indexUrl, {

`skills/clawsec-suite/scripts/generate_checksums_json.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/scripts/guarded_skill_install.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 16

const DEFAULT_FEED_URL =   "https://clawsec.prompt.security/advisories/feed.json";

Network accessline 16

const DEFAULT_FEED_URL =   "https://clawsec.prompt.security/advisories/feed.json";

Network accessline 17

"https://clawsec.prompt.security/advisories/feed.json";

Network accessline 17

"https://clawsec.prompt.security/advisories/feed.json";

Access to secretsline 139
```
[Credential-related source omitted]
```
Access to secretsline 139
```
[Credential-related source omitted]
```

`skills/clawsec-suite/scripts/local_file_io.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/scripts/setup_advisory_cron.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/scripts/setup_advisory_hook.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/scripts/sign_detached_ed25519.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/scripts/verify_detached_ed25519.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "keywords": [

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 189

"catalog": {     "description": "Available protections in the ClawSec suite",     "base_url": "https://clawsec.prompt.security/releases/download",

Network accessline 189

"catalog": {     "description": "Available protections in the ClawSec suite",     "base_url": "https://clawsec.prompt.security/releases/download",

Network accessline 190

"description": "Available protections in the ClawSec suite",     "base_url": "https://clawsec.prompt.security/releases/download",     "skills": {

Network accessline 190

"description": "Available protections in the ClawSec suite",     "base_url": "https://clawsec.prompt.security/releases/download",     "skills": {

Network accessline 191

"base_url": "https://clawsec.prompt.security/releases/download",

Network accessline 191

"base_url": "https://clawsec.prompt.security/releases/download",

`skills/clawsec-suite/test/advisory_application_scope.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/advisory_suppression.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/feed_verification.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/fuzz_properties.js`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/test/fuzz_properties.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/fuzz_semver_scope_suppression.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/guarded_install.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/heartbeat_version_check.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 58

resolve({         url: `http://127.0.0.1:${addr.port}`,

Network accessline 58

resolve({         url: `http://127.0.0.1:${addr.port}`,

Network accessline 59
```
url: `http://127.0.0.1:${addr.port}`,
```
Network accessline 59
```
url: `http://127.0.0.1:${addr.port}`,
```

`skills/clawsec-suite/test/lib/test_harness.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/clawsec-suite/test/path_resolution.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/setup_disclosure.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/clawsec-suite/test/skill_catalog_discovery.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 57

resolve({         url: `http://127.0.0.1:${addr.port}`,

Network accessline 57

resolve({         url: `http://127.0.0.1:${addr.port}`,

Network accessline 58
```
url: `http://127.0.0.1:${addr.port}`,
```
Network accessline 58
```
url: `http://127.0.0.1:${addr.port}`,
```

Network accessline 195

try {     const result = await runCatalogScript(["--json"], {       CLAWSEC_SKILLS_INDEX_URL: "http://127.0.0.1:9/index.json",

Network accessline 195

try {     const result = await runCatalogScript(["--json"], {       CLAWSEC_SKILLS_INDEX_URL: "http://127.0.0.1:9/index.json",

Network accessline 196

const result = await runCatalogScript(["--json"], {       CLAWSEC_SKILLS_INDEX_URL: "http://127.0.0.1:9/index.json",       CLAWSEC_SKILLS_INDEX_TIMEOUT_MS: "250",

Network accessline 196

const result = await runCatalogScript(["--json"], {       CLAWSEC_SKILLS_INDEX_URL: "http://127.0.0.1:9/index.json",       CLAWSEC_SKILLS_INDEX_TIMEOUT_MS: "250",

Network accessline 197

CLAWSEC_SKILLS_INDEX_URL: "http://127.0.0.1:9/index.json",

Network accessline 197

CLAWSEC_SKILLS_INDEX_URL: "http://127.0.0.1:9/index.json",

`skills/clawtributor/.clawhubignore`

Access to secretsline 10
```
[Credential-related source omitted]
```
Access to secretsline 10
```
[Credential-related source omitted]
```

`skills/clawtributor/CHANGELOG.md`

Network accessline 32

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 32

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 33

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 33

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

`skills/clawtributor/README.md`

Network accessline 56

- https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md

Network accessline 56

- https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md

Network accessline 60

GNU AGPL v3.0 or later - [Prompt Security](https://prompt.security)

Network accessline 60

GNU AGPL v3.0 or later - [Prompt Security](https://prompt.security)

`skills/clawtributor/SKILL.md`

Network accessline 3

version: 0.0.9 description: Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.9 description: Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats. homepage: https://clawsec.prompt.security

Network accessline 4

description: Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats. homepage: https://clawsec.prompt.security platforms:

Network accessline 4

description: Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats. homepage: https://clawsec.prompt.security platforms:

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 45

**An open source project by [Prompt Security](https://prompt.security)**

Network accessline 45

**An open source project by [Prompt Security](https://prompt.security)**

Network accessline 83

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 83

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 84

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 84

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 85

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 85

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 88
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 88
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 92

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 92

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 93

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 93

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 94

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 94

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 95

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 95

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 96

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 96

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 97

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 97

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 287

- [Security Incident Report Form](https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md)

Network accessline 287

- [Security Incident Report Form](https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md)

`skills/clawtributor/reporting.md`

Network accessline 102

2. Show the exact payload to the user and request explicit approval. 3. After approval, open the browser form:    - https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md

Network accessline 102

2. Show the exact payload to the user and request explicit approval. 3. After approval, open the browser form:    - https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md

Network accessline 103

3. After approval, open the browser form:    - https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md 4. Paste the report content and submit.

Network accessline 103

3. After approval, open the browser form:    - https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md 4. Paste the report content and submit.

Network accessline 104

- https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md

Network accessline 104

- https://github.com/prompt-security/clawsec/issues/new?template=security_incident_report.md

`skills/clawtributor/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "platforms": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "platforms": [

Network accessline 7

"homepage": "https://clawsec.prompt.security",

Network accessline 7

"homepage": "https://clawsec.prompt.security",

`skills/hermes-attestation-guardian/SKILL.md`

Network accessline 3

version: 0.1.7 description: Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.1.7 description: Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure. homepage: https://clawsec.prompt.security

Network accessline 4

description: Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure. homepage: https://clawsec.prompt.security hermes:

Network accessline 4

description: Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure. homepage: https://clawsec.prompt.security hermes:

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/hermes-attestation-guardian/lib/attestation.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/hermes-attestation-guardian/lib/cron.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/hermes-attestation-guardian/lib/diff.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/hermes-attestation-guardian/lib/feed.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

Network accessline 12

const DEFAULT_REMOTE_FEED_URL = "https://clawsec.prompt.security/advisories/feed.json";

Network accessline 12

const DEFAULT_REMOTE_FEED_URL = "https://clawsec.prompt.security/advisories/feed.json";

Network accessline 330

const timeout = globalThis.setTimeout(() => controller.abort(), 10000);   try {     const response = await globalThis.fetch(url, {

Network accessline 330

const timeout = globalThis.setTimeout(() => controller.abort(), 10000);   try {     const response = await globalThis.fetch(url, {

Network accessline 331

try {     const response = await globalThis.fetch(url, {       method: "GET",

Network accessline 331

try {     const response = await globalThis.fetch(url, {       method: "GET",

Network accessline 332

const response = await globalThis.fetch(url, {

Network accessline 332

const response = await globalThis.fetch(url, {

Network accessline 350

const timeout = globalThis.setTimeout(() => controller.abort(), 10000);   try {     const response = await globalThis.fetch(url, {

Network accessline 350

const timeout = globalThis.setTimeout(() => controller.abort(), 10000);   try {     const response = await globalThis.fetch(url, {

Network accessline 351

try {     const response = await globalThis.fetch(url, {       method: "GET",

Network accessline 351

try {     const response = await globalThis.fetch(url, {       method: "GET",

Network accessline 352

const response = await globalThis.fetch(url, {

Network accessline 352

const response = await globalThis.fetch(url, {

Access to secretsline 499
```
[Credential-related source omitted]
```
Access to secretsline 499
```
[Credential-related source omitted]
```

`skills/hermes-attestation-guardian/lib/semver.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/hermes-attestation-guardian/scripts/check_advisories.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/scripts/generate_attestation.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/scripts/guarded_skill_verify.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/scripts/refresh_advisory_feed.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/scripts/setup_advisory_check_cron.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/scripts/setup_attestation_cron.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```
Access to secretsline 44
```
[Credential-related source omitted]
```
Access to secretsline 44
```
[Credential-related source omitted]
```

`skills/hermes-attestation-guardian/scripts/verify_attestation.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```
Access to secretsline 26
```
[Credential-related source omitted]
```
Access to secretsline 26
```
[Credential-related source omitted]
```

`skills/hermes-attestation-guardian/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "hermes",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "hermes",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/hermes-attestation-guardian/test/attestation_cli.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/test/attestation_diff.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/test/attestation_schema.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/test/feed_verification.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 416

async (url) => {       const target = String(url);       if (target === "https://example.test/feed.json") {

Network accessline 416

async (url) => {       const target = String(url);       if (target === "https://example.test/feed.json") {

Network accessline 417

const target = String(url);       if (target === "https://example.test/feed.json") {         return { ok: true, status: 200, text: async () => feedRaw };

Network accessline 417

const target = String(url);       if (target === "https://example.test/feed.json") {         return { ok: true, status: 200, text: async () => feedRaw };

Network accessline 418

if (target === "https://example.test/feed.json") {

Network accessline 418

if (target === "https://example.test/feed.json") {

Network accessline 419

return { ok: true, status: 200, text: async () => feedRaw };       }       if (target === "https://example.test/feed.json.sig") {

Network accessline 419

return { ok: true, status: 200, text: async () => feedRaw };       }       if (target === "https://example.test/feed.json.sig") {

Network accessline 420

}       if (target === "https://example.test/feed.json.sig") {         return { ok: true, status: 200, text: async () => signatureRaw };

Network accessline 420

}       if (target === "https://example.test/feed.json.sig") {         return { ok: true, status: 200, text: async () => signatureRaw };

Network accessline 421

if (target === "https://example.test/feed.json.sig") {

Network accessline 421

if (target === "https://example.test/feed.json.sig") {

Network accessline 422

return { ok: true, status: 200, text: async () => signatureRaw };       }       if (target === "https://example.test/checksums.json") {

Network accessline 422

return { ok: true, status: 200, text: async () => signatureRaw };       }       if (target === "https://example.test/checksums.json") {

Network accessline 423

}       if (target === "https://example.test/checksums.json") {         return { ok: false, status: 404, text: async () => "" };

Network accessline 423

}       if (target === "https://example.test/checksums.json") {         return { ok: false, status: 404, text: async () => "" };

Network accessline 424

if (target === "https://example.test/checksums.json") {

Network accessline 424

if (target === "https://example.test/checksums.json") {

Network accessline 425

return { ok: false, status: 404, text: async () => "" };       }       if (target === "https://example.test/checksums.json.sig") {

Network accessline 425

return { ok: false, status: 404, text: async () => "" };       }       if (target === "https://example.test/checksums.json.sig") {

Network accessline 426

}       if (target === "https://example.test/checksums.json.sig") {         return { ok: false, status: 404, text: async () => "" };

Network accessline 426

}       if (target === "https://example.test/checksums.json.sig") {         return { ok: false, status: 404, text: async () => "" };

Network accessline 427

if (target === "https://example.test/checksums.json.sig") {

Network accessline 427

if (target === "https://example.test/checksums.json.sig") {

Network accessline 433

await expectReject("remote missing checksum artifacts must fail closed", async () => {         await loadRemoteFeed({           feedUrl: "https://example.test/feed.json",

Network accessline 433

await expectReject("remote missing checksum artifacts must fail closed", async () => {         await loadRemoteFeed({           feedUrl: "https://example.test/feed.json",

Network accessline 434

await loadRemoteFeed({           feedUrl: "https://example.test/feed.json",           signatureUrl: "https://example.test/feed.json.sig",

Network accessline 434

await loadRemoteFeed({           feedUrl: "https://example.test/feed.json",           signatureUrl: "https://example.test/feed.json.sig",

Network accessline 435

feedUrl: "https://example.test/feed.json",

Network accessline 435

feedUrl: "https://example.test/feed.json",

Network accessline 436

signatureUrl: "https://example.test/feed.json.sig",

Network accessline 436

signatureUrl: "https://example.test/feed.json.sig",

Network accessline 437

checksumsUrl: "https://example.test/checksums.json",

Network accessline 437

checksumsUrl: "https://example.test/checksums.json",

Network accessline 438

checksumsSignatureUrl: "https://example.test/checksums.json.sig",

Network accessline 438

checksumsSignatureUrl: "https://example.test/checksums.json.sig",

`skills/hermes-attestation-guardian/test/guarded_skill_verify.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/test/hermes_attestation_sandbox_regression.sh`

Executable scriptline 1
```
#!/usr/bin/env bash
```
Executable scriptline 1
```
#!/usr/bin/env bash
```

Network accessline 50

export DEBIAN_FRONTEND=noninteractive apt-get update >/dev/null apt-get install -y --no-install-recommends openssl ca-certificates curl nodejs npm zip >/dev/null

Network accessline 50

export DEBIAN_FRONTEND=noninteractive apt-get update >/dev/null apt-get install -y --no-install-recommends openssl ca-certificates curl nodejs npm zip >/dev/null

Network accessline 52

apt-get install -y --no-install-recommends openssl ca-certificates curl nodejs npm zip >/dev/null

Network accessline 52

apt-get install -y --no-install-recommends openssl ca-certificates curl nodejs npm zip >/dev/null

Access to secretsline 73
```
[Credential-related source omitted]
```
Access to secretsline 73
```
[Credential-related source omitted]
```

Network accessline 105

set +e INSTALL_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes 2>&1)

Network accessline 105

set +e INSTALL_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes 2>&1)

Network accessline 106

INSTALL_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes 2>&1)

Network accessline 106

INSTALL_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes 2>&1)

Network accessline 116

echo \"[sandbox] install without --force was not ALLOWED; retrying with --force for feature regression coverage\" >&2   set +e   INSTALL_FORCE_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/he

Network accessline 116

echo \"[sandbox] install without --force was not ALLOWED; retrying with --force for feature regression coverage\" >&2   set +e   INSTALL_FORCE_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/he

Network accessline 117

set +e   INSTALL_FORCE_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes --force 2>&1)   INSTALL_FORCE_CODE=\$?

Network accessline 117

set +e   INSTALL_FORCE_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes --force 2>&1)   INSTALL_FORCE_CODE=\$?

Network accessline 118

INSTALL_FORCE_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes --force 2>&1)

Network accessline 118

INSTALL_FORCE_OUT=\$(hermes skills install \"well-known:http://127.0.0.1:$WELL_KNOWN_PORT/.well-known/skills/hermes-attestation-guardian\" --yes --force 2>&1)

Access to secretsline 190
```
[Credential-related source omitted]
```
Access to secretsline 190
```
[Credential-related source omitted]
```

`skills/hermes-attestation-guardian/test/setup_advisory_check_cron.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-attestation-guardian/test/setup_attestation_cron.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/hermes-traffic-guardian/SKILL.md`

Network accessline 3

version: 0.0.1-beta5 description: Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.1-beta5 description: Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture. homepage: https://clawsec.prompt.security

Network accessline 4

description: Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 4

description: Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/hermes-traffic-guardian/SPEC.md`

Access to secretsline 39
```
[Credential-related source omitted]
```
Access to secretsline 39
```
[Credential-related source omitted]
```

`skills/hermes-traffic-guardian/scripts/.gitkeep`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/hermes-traffic-guardian/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "hermes",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "hermes",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/nanoclaw-traffic-guardian/SKILL.md`

Network accessline 3

version: 0.0.1-beta5 description: NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.1-beta5 description: NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces. homepage: https://clawsec.prompt.security

Network accessline 4

description: NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 4

description: NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 34

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 34

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 35

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 35

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 36

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 36

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 39
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 39
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 43

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 43

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 44

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 44

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 45

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 45

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 46

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 46

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 47

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 47

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 48

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 48

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/nanoclaw-traffic-guardian/SPEC.md`

Access to secretsline 46
```
[Credential-related source omitted]
```
Access to secretsline 46
```
[Credential-related source omitted]
```

`skills/nanoclaw-traffic-guardian/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "nanoclaw",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "nanoclaw",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/openclaw-audit-watchdog/.clawhubignore`

Access to secretsline 10
```
[Credential-related source omitted]
```
Access to secretsline 10
```
[Credential-related source omitted]
```

`skills/openclaw-audit-watchdog/CHANGELOG.md`

Network accessline 33

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),

Network accessline 33

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),

Network accessline 34

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 34

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 82

- Contributor credit: portability and path-hardening improvements in this release were contributed by [@aldodelgado](https://github.com/aldodelgado) in PR #62.

Network accessline 82

- Contributor credit: portability and path-hardening improvements in this release were contributed by [@aldodelgado](https://github.com/aldodelgado) in PR #62.

`skills/openclaw-audit-watchdog/README.md`

Network accessline 38

# Download and extract curl -sSL "https://github.com/prompt-security/clawsec/releases/download/$VERSION_TAG/openclaw-audit-watchdog.skill" -o watchdog.skill

Network accessline 38

# Download and extract curl -sSL "https://github.com/prompt-security/clawsec/releases/download/$VERSION_TAG/openclaw-audit-watchdog.skill" -o watchdog.skill

Network accessline 39

curl -sSL "https://github.com/prompt-security/clawsec/releases/download/$VERSION_TAG/openclaw-audit-watchdog.skill" -o watchdog.skill

Network accessline 39

curl -sSL "https://github.com/prompt-security/clawsec/releases/download/$VERSION_TAG/openclaw-audit-watchdog.skill" -o watchdog.skill

Network accessline 231

**Part of [ClawSec](https://github.com/prompt-security/clawsec) by [Prompt Security](https://prompt.security)**

Network accessline 231

**Part of [ClawSec](https://github.com/prompt-security/clawsec) by [Prompt Security](https://prompt.security)**

`skills/openclaw-audit-watchdog/SKILL.md`

Network accessline 3

version: 0.1.9 description: Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.

Network accessline 3

version: 0.1.9 description: Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.

Network accessline 4

description: Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients. homepage: https

Network accessline 4

description: Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients. homepage: https

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 85

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 85

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 86

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 86

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 87

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 87

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 90
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 90
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 94

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 94

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 95

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 95

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 96

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 96

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 97

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 97

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 98

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 98

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 99

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 99

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/openclaw-audit-watchdog/scripts/codex_review.sh`

Executable scriptline 1
```
#!/usr/bin/env bash
```
Executable scriptline 1
```
#!/usr/bin/env bash
```

`skills/openclaw-audit-watchdog/scripts/load_suppression_config.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-audit-watchdog/scripts/render_report.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-audit-watchdog/scripts/run_audit_and_format.sh`

Executable scriptline 1
```
#!/usr/bin/env bash
```
Executable scriptline 1
```
#!/usr/bin/env bash
```

Dangerous shell operationline 48

rm -f "$AUDIT_JSON" "$DEEP_JSON" 2>/dev/null || true

Dangerous shell operationline 48

rm -f "$AUDIT_JSON" "$DEEP_JSON" 2>/dev/null || true

Dangerous shell operationline 78
```
rm -f "$errfile" 2>/dev/null || true
```
Dangerous shell operationline 78
```
rm -f "$errfile" 2>/dev/null || true
```

`skills/openclaw-audit-watchdog/scripts/runner.sh`

Executable scriptline 1
```
#!/usr/bin/env bash
```
Executable scriptline 1
```
#!/usr/bin/env bash
```

`skills/openclaw-audit-watchdog/scripts/send_smtp.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-audit-watchdog/scripts/sendmail_report.sh`

Executable scriptline 1
```
#!/usr/bin/env bash
```
Executable scriptline 1
```
#!/usr/bin/env bash
```

`skills/openclaw-audit-watchdog/scripts/setup_cron.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-audit-watchdog/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "keywords": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "keywords": [

Network accessline 7

"homepage": "https://clawsec.prompt.security",

Network accessline 7

"homepage": "https://clawsec.prompt.security",

`skills/openclaw-audit-watchdog/test/render_report_suppression.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-audit-watchdog/test/setup_cron.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-audit-watchdog/test/suppression_config.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-audit-watchdog/test/suppression_config_fuzz.test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/openclaw-traffic-guardian/SKILL.md`

Network accessline 3

version: 0.0.1-beta5 description: OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review. homepage: https://clawsec.prompt.securit

Network accessline 3

version: 0.0.1-beta5 description: OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review. homepage: https://clawsec.prompt.securit

Network accessline 4

description: OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review. homepage: https://clawsec.prompt.security author: prompt-secu

Network accessline 4

description: OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review. homepage: https://clawsec.prompt.security author: prompt-secu

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/openclaw-traffic-guardian/SPEC.md`

Access to secretsline 39
```
[Credential-related source omitted]
```
Access to secretsline 39
```
[Credential-related source omitted]
```

`skills/openclaw-traffic-guardian/scripts/.gitkeep`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/openclaw-traffic-guardian/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "openclaw",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "openclaw",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/picoclaw-security-guardian/SKILL.md`

Network accessline 3

version: 0.0.6 description: Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.6 description: Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance. homepage: https://clawsec.prompt.security

Network accessline 4

description: Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 4

description: Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 38

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 38

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 39

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 39

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 40

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 40

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 43
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 43
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 47

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 47

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 48

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 48

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 49

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 49

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 50

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 50

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 51

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 51

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 52

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 52

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/picoclaw-security-guardian/lib/advisories.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-security-guardian/lib/drift.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-security-guardian/lib/profile.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-security-guardian/lib/supply_chain.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-security-guardian/scripts/check_advisories.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/picoclaw-security-guardian/scripts/check_drift.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/picoclaw-security-guardian/scripts/generate_profile.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/picoclaw-security-guardian/scripts/verify_supply_chain.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/picoclaw-security-guardian/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "picoclaw",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "picoclaw",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/picoclaw-security-guardian/test/advisories.test.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-security-guardian/test/drift.test.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-security-guardian/test/picoclaw_security_guardian_sandbox_regression.sh`

Executable scriptline 1
```
#!/usr/bin/env bash
```
Executable scriptline 1
```
#!/usr/bin/env bash
```

Network accessline 60

export DEBIAN_FRONTEND=noninteractive apt-get update >/dev/null apt-get install -y --no-install-recommends ca-certificates curl nodejs npm openssl zip >/dev/null

Network accessline 60

export DEBIAN_FRONTEND=noninteractive apt-get update >/dev/null apt-get install -y --no-install-recommends ca-certificates curl nodejs npm openssl zip >/dev/null

Network accessline 62

apt-get install -y --no-install-recommends ca-certificates curl nodejs npm openssl zip >/dev/null

Network accessline 62

apt-get install -y --no-install-recommends ca-certificates curl nodejs npm openssl zip >/dev/null

Access to secretsline 107
```
[Credential-related source omitted]
```
Access to secretsline 107
```
[Credential-related source omitted]
```
Access to secretsline 145
```
[Credential-related source omitted]
```
Access to secretsline 145
```
[Credential-related source omitted]
```

Network accessline 150

REGISTRY_READY=0 for _ in $(seq 1 30); do   if curl -fsS "http://127.0.0.1:$CLAWHUB_PORT/api/v1/skills/picoclaw-security-guardian" >/dev/null; then

Network accessline 150

REGISTRY_READY=0 for _ in $(seq 1 30); do   if curl -fsS "http://127.0.0.1:$CLAWHUB_PORT/api/v1/skills/picoclaw-security-guardian" >/dev/null; then

Network accessline 151

for _ in $(seq 1 30); do   if curl -fsS "http://127.0.0.1:$CLAWHUB_PORT/api/v1/skills/picoclaw-security-guardian" >/dev/null; then     REGISTRY_READY=1

Network accessline 151

for _ in $(seq 1 30); do   if curl -fsS "http://127.0.0.1:$CLAWHUB_PORT/api/v1/skills/picoclaw-security-guardian" >/dev/null; then     REGISTRY_READY=1

Network accessline 152

if curl -fsS "http://127.0.0.1:$CLAWHUB_PORT/api/v1/skills/picoclaw-security-guardian" >/dev/null; then

Network accessline 152

if curl -fsS "http://127.0.0.1:$CLAWHUB_PORT/api/v1/skills/picoclaw-security-guardian" >/dev/null; then

Network accessline 187

func main() {     workspace := os.Getenv("PICOCLAW_WORKSPACE")     baseURL := "http://127.0.0.1:" + os.Getenv("CLAWHUB_PORT")

Network accessline 187

func main() {     workspace := os.Getenv("PICOCLAW_WORKSPACE")     baseURL := "http://127.0.0.1:" + os.Getenv("CLAWHUB_PORT")

Network accessline 188

workspace := os.Getenv("PICOCLAW_WORKSPACE")     baseURL := "http://127.0.0.1:" + os.Getenv("CLAWHUB_PORT")     version := os.Getenv("SKILL_VERSION")

Network accessline 188

workspace := os.Getenv("PICOCLAW_WORKSPACE")     baseURL := "http://127.0.0.1:" + os.Getenv("CLAWHUB_PORT")     version := os.Getenv("SKILL_VERSION")

Network accessline 189

baseURL := "http://127.0.0.1:" + os.Getenv("CLAWHUB_PORT")

Network accessline 189

baseURL := "http://127.0.0.1:" + os.Getenv("CLAWHUB_PORT")

`skills/picoclaw-security-guardian/test/profile.test.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-security-guardian/test/supply_chain.test.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-self-pen-testing/SKILL.md`

Network accessline 3

version: 0.0.5 description: Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.5 description: Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance. homepage: https://clawsec.prompt.security

Network accessline 4

description: Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 4

description: Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 38

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 38

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 39

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 39

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 40

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 40

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 43
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 43
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 47

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 47

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 48

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 48

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 49

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 49

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 50

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 50

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 51

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 51

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 52

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 52

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/picoclaw-self-pen-testing/lib/format.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-self-pen-testing/lib/self_pen_test.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-self-pen-testing/scripts/self_pen_test.mjs`

Executable scriptline 1
```
#!/usr/bin/env node
```
Executable scriptline 1
```
#!/usr/bin/env node
```

`skills/picoclaw-self-pen-testing/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "picoclaw",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "picoclaw",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/picoclaw-self-pen-testing/test/self_pen_test.test.mjs`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-traffic-guardian/SKILL.md`

Network accessline 3

version: 0.0.1-beta5 description: Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration. homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.1-beta5 description: Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration. homepage: https://clawsec.prompt.security

Network accessline 4

description: Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 4

description: Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration. homepage: https://clawsec.prompt.security author: prompt-security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 35

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 36

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 37

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 40
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 44

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 45

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 46

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 47

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 48

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 49

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/picoclaw-traffic-guardian/SPEC.md`

Access to secretsline 39
```
[Credential-related source omitted]
```
Access to secretsline 39
```
[Credential-related source omitted]
```

`skills/picoclaw-traffic-guardian/scripts/.gitkeep`

Executable scriptline 1
```
Executable file
```
Executable scriptline 1
```
Executable file
```

`skills/picoclaw-traffic-guardian/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "picoclaw",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security/",   "platform": "picoclaw",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

Network accessline 7

"homepage": "https://clawsec.prompt.security/",

`skills/soul-guardian/.clawhubignore`

Access to secretsline 10
```
[Credential-related source omitted]
```
Access to secretsline 10
```
[Credential-related source omitted]
```

`skills/soul-guardian/CHANGELOG.md`

Network accessline 28

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 28

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

Network accessline 29

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Network accessline 29

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

`skills/soul-guardian/SKILL.md`

Network accessline 3

version: 0.0.9 description: Drift detection + baseline integrity guard for agent workspace files with automatic alerting support homepage: https://clawsec.prompt.security

Network accessline 3

version: 0.0.9 description: Drift detection + baseline integrity guard for agent workspace files with automatic alerting support homepage: https://clawsec.prompt.security

Network accessline 4

description: Drift detection + baseline integrity guard for agent workspace files with automatic alerting support homepage: https://clawsec.prompt.security metadata: {"openclaw":{"emoji":"👻","category":"security"}}

Network accessline 4

description: Drift detection + baseline integrity guard for agent workspace files with automatic alerting support homepage: https://clawsec.prompt.security metadata: {"openclaw":{"emoji":"👻","category":"security"}}

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 5

homepage: https://clawsec.prompt.security

Network accessline 42

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 42

REPO="prompt-security/clawsec" TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 43

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 43

TAG="${SKILL_NAME}-v${VERSION}" BASE="https://github.com/${REPO}/releases/download/${TAG}" ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"

Network accessline 44

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Network accessline 44

BASE="https://github.com/${REPO}/releases/download/${TAG}"

Dangerous shell operationline 47
```
trap 'rm -rf "$TMP_DIR"' EXIT
```
Dangerous shell operationline 47
```
trap 'rm -rf "$TMP_DIR"' EXIT
```

Network accessline 51

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 51

curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"

Network accessline 52

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 52

curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"

Network accessline 53

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 53

curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"

Network accessline 54

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 54

curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"

Network accessline 55

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 55

curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"

Network accessline 56

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

Network accessline 56

curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"

`skills/soul-guardian/scripts/install_launchd_plist.py`

Executable scriptline 1
```
#!/usr/bin/env python3
```
Executable scriptline 1
```
#!/usr/bin/env python3
```

`skills/soul-guardian/scripts/onboard_state_dir.py`

Executable scriptline 1
```
#!/usr/bin/env python3
```
Executable scriptline 1
```
#!/usr/bin/env python3
```

`skills/soul-guardian/scripts/soul_guardian.py`

Executable scriptline 1
```
#!/usr/bin/env python3
```
Executable scriptline 1
```
#!/usr/bin/env python3
```

`skills/soul-guardian/scripts/test_install_launchd_plist.py`

Executable scriptline 1
```
#!/usr/bin/env python3
```
Executable scriptline 1
```
#!/usr/bin/env python3
```
Access to secretsline 36
```
[Credential-related source omitted]
```
Access to secretsline 36
```
[Credential-related source omitted]
```
Access to secretsline 59
```
[Credential-related source omitted]
```
Access to secretsline 59
```
[Credential-related source omitted]
```
Access to secretsline 60
```
[Credential-related source omitted]
```
Access to secretsline 60
```
[Credential-related source omitted]
```
Access to secretsline 70
```
[Credential-related source omitted]
```
Access to secretsline 70
```
[Credential-related source omitted]
```
Access to secretsline 72
```
[Credential-related source omitted]
```
Access to secretsline 72
```
[Credential-related source omitted]
```
Access to secretsline 76
```
[Credential-related source omitted]
```
Access to secretsline 76
```
[Credential-related source omitted]
```
Access to secretsline 77
```
[Credential-related source omitted]
```
Access to secretsline 77
```
[Credential-related source omitted]
```
Access to secretsline 82
```
[Credential-related source omitted]
```
Access to secretsline 82
```
[Credential-related source omitted]
```
Access to secretsline 84
```
[Credential-related source omitted]
```
Access to secretsline 84
```
[Credential-related source omitted]
```
Access to secretsline 141
```
[Credential-related source omitted]
```
Access to secretsline 141
```
[Credential-related source omitted]
```

`skills/soul-guardian/scripts/test_soul_guardian.py`

Executable scriptline 1
```
#!/usr/bin/env python3
```
Executable scriptline 1
```
#!/usr/bin/env python3
```

`skills/soul-guardian/skill.json`

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 5

"author": "prompt-security",   "license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "keywords": [

Network accessline 6

"license": "AGPL-3.0-or-later",   "homepage": "https://clawsec.prompt.security",   "keywords": [

Network accessline 7

"homepage": "https://clawsec.prompt.security",

Network accessline 7

"homepage": "https://clawsec.prompt.security",

`utils/validate_skill.py`

Executable scriptline 1
```
#!/usr/bin/env python3
```

`wiki/exploitability-scoring.md`

Network accessline 216

"type": "path_traversal",   "references": [     "https://exploit-db.com/exploits/51234",

Network accessline 216

"type": "path_traversal",   "references": [     "https://exploit-db.com/exploits/51234",

Network accessline 217

"references": [     "https://exploit-db.com/exploits/51234",     "https://nvd.nist.gov/vuln/detail/CVE-2024-34567"

Network accessline 217

"references": [     "https://exploit-db.com/exploits/51234",     "https://nvd.nist.gov/vuln/detail/CVE-2024-34567"

Network accessline 218

"https://exploit-db.com/exploits/51234",

Network accessline 218

"https://exploit-db.com/exploits/51234",

Network accessline 219

"https://nvd.nist.gov/vuln/detail/CVE-2024-34567"

Network accessline 219

"https://nvd.nist.gov/vuln/detail/CVE-2024-34567"

Network accessline 286

"description": "Prototype pollution in lodash merge function",   "references": [     "https://github.com/exploit/prototype-pollution-poc",

Network accessline 286

"description": "Prototype pollution in lodash merge function",   "references": [     "https://github.com/exploit/prototype-pollution-poc",

Network accessline 287

"references": [     "https://github.com/exploit/prototype-pollution-poc",     "https://snyk.io/vuln/SNYK-JS-LODASH-1234567"

Network accessline 287

"references": [     "https://github.com/exploit/prototype-pollution-poc",     "https://snyk.io/vuln/SNYK-JS-LODASH-1234567"

Network accessline 288

"https://github.com/exploit/prototype-pollution-poc",

Network accessline 288

"https://github.com/exploit/prototype-pollution-poc",

Network accessline 289

"https://snyk.io/vuln/SNYK-JS-LODASH-1234567"

Network accessline 289

"https://snyk.io/vuln/SNYK-JS-LODASH-1234567"

Network accessline 340

# With exploit detection echo '{"cve_id":"CVE-2024-12345","cvss_score":7.3,"references":["https://exploit-db.com/exploits/51234"]}' | \

Network accessline 340

# With exploit detection echo '{"cve_id":"CVE-2024-12345","cvss_score":7.3,"references":["https://exploit-db.com/exploits/51234"]}' | \

Network accessline 341

echo '{"cve_id":"CVE-2024-12345","cvss_score":7.3,"references":["https://exploit-db.com/exploits/51234"]}' | \

Network accessline 341

echo '{"cve_id":"CVE-2024-12345","cvss_score":7.3,"references":["https://exploit-db.com/exploits/51234"]}' | \

Network accessline 350

# Get only high-exploitability advisories curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 350

# Get only high-exploitability advisories curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 351

curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 351

curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 354

# Prioritize by exploitability and severity curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 354

# Prioritize by exploitability and severity curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 355

curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 355

curl -s https://clawsec.prompt.security/feed.json | \

Network accessline 399

- **CVSS v3.1 Specification**: [https://www.first.org/cvss/v3.1/specification-document](https://www.first.org/cvss/v3.1/specification-document)

Network accessline 399

- **CVSS v3.1 Specification**: [https://www.first.org/cvss/v3.1/specification-document](https://www.first.org/cvss/v3.1/specification-document)

Network accessline 400

- **CVSS v2 Guide**: [https://www.first.org/cvss/v2/guide](https://www.first.org/cvss/v2/guide)

Network accessline 400

- **CVSS v2 Guide**: [https://www.first.org/cvss/v2/guide](https://www.first.org/cvss/v2/guide)

Network accessline 401

- **EPSS**: [https://www.first.org/epss/](https://www.first.org/epss/)

Network accessline 401

- **EPSS**: [https://www.first.org/epss/](https://www.first.org/epss/)

Network accessline 402

- **CISA KEV**: [https://www.cisa.gov/known-exploited-vulnerabilities-catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)

Network accessline 402

- **CISA KEV**: [https://www.cisa.gov/known-exploited-vulnerabilities-catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)

Network accessline 403

- **NVD API**: [https://nvd.nist.gov/developers/vulnerabilities](https://nvd.nist.gov/developers/vulnerabilities)

Network accessline 403

- **NVD API**: [https://nvd.nist.gov/developers/vulnerabilities](https://nvd.nist.gov/developers/vulnerabilities)

Network accessline 418

**Maintained by**: [Prompt Security](https://prompt.security)

Network accessline 418

**Maintained by**: [Prompt Security](https://prompt.security)

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

Signal confidence: 500 facts

Network access in prose of documentationREADME.md:5Low confidence
Network access in prose of documentationREADME.md:6Low confidence
Network access in prose of documentationREADME.md:7Low confidence
Network access in prose of documentationREADME.md:8Low confidence
Network access in prose of documentationREADME.md:9Low confidence
Network access in prose of documentationREADME.md:10Low confidence
Network access in prose of documentationREADME.md:12Low confidence
Network access in prose of documentationREADME.md:13Low confidence
Network access in prose of documentationREADME.md:14Low confidence
Network access in prose of documentationREADME.md:17Low confidence
Network access in prose of documentationREADME.md:18Low confidence
Network access in prose of documentationREADME.md:19Low confidence
Network access in prose of documentationREADME.md:20Low confidence
Network access in prose of documentationREADME.md:121Low confidence
Network access in code of documentationREADME.md:136Low confidence
Executable script in code of a file that runsscripts/release-skill.sh:1High confidence
Dangerous shell operation in code of a file that runsscripts/release-skill.sh:98High confidence
Network access in code of a file that runsscripts/release-skill.sh:303High confidence
Network access in code of a file that runsscripts/release-skill.sh:304High confidence
Network access in code of a file that runsscripts/release-skill.sh:305High confidence
Network access in prose of documentationclaw-release/CHANGELOG.md:17Low confidence
Network access in prose of documentationclaw-release/CHANGELOG.md:18Low confidence
Network access in the frontmatter of the SKILL.mdclaw-release/SKILL.md:3Low confidence
Network access in the frontmatter of the SKILL.mdclaw-release/SKILL.md:4Low confidence
Network access in the frontmatter of the SKILL.mdclaw-release/SKILL.md:5Low confidence
Network access in prose of the SKILL.mdclaw-release/SKILL.md:22Low confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:51High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:52High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:53High confidence
Dangerous shell operation in code of the SKILL.mdclaw-release/SKILL.md:56High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:60High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:61High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:62High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:63High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:64High confidence
Network access in code of the SKILL.mdclaw-release/SKILL.md:65High confidence
Network access in prose of the SKILL.mdclaw-release/SKILL.md:185Low confidence
Network access in prose of the SKILL.mdclaw-release/SKILL.md:186Low confidence
Network access in prose of the SKILL.mdclaw-release/SKILL.md:268Low confidence
Network access in prose of documentationskills/clawsec-clawhub-checker/CHANGELOG.md:36Low confidence
Network access in prose of documentationclawsec-clawhub-checker/CHANGELOG.md:36Low confidence
Network access in prose of documentationskills/clawsec-clawhub-checker/CHANGELOG.md:37Low confidence
Network access in prose of documentationclawsec-clawhub-checker/CHANGELOG.md:37Low confidence
Network access in the frontmatter of the SKILL.mdskills/clawsec-clawhub-checker/SKILL.md:3Low confidence
Network access in the frontmatter of the SKILL.mdclawsec-clawhub-checker/SKILL.md:3Low confidence
Network access in the frontmatter of the SKILL.mdskills/clawsec-clawhub-checker/SKILL.md:4Low confidence
Network access in the frontmatter of the SKILL.mdclawsec-clawhub-checker/SKILL.md:4Low confidence
Network access in the frontmatter of the SKILL.mdskills/clawsec-clawhub-checker/SKILL.md:5Low confidence
Network access in the frontmatter of the SKILL.mdclawsec-clawhub-checker/SKILL.md:5Low confidence
Network access in code of the SKILL.mdskills/clawsec-clawhub-checker/SKILL.md:65High confidence

and 450 more

Only the first 500 facts are listed.

Works with

Agent compatibility, from the files in this repository
Agent	Status	Evidence	Install to
Claude Code	Native	Manifest .claude-plugin/marketplace.json	`.claude/skills/<skill-name>/`
Codex	Native	Manifest AGENTS.md	`.agents/skills/<skill-name>/`
Cursor	Compatible	Standard SKILL.md skills/claw-release/SKILL.md	`.cursor/skills/<skill-name>/`
Gemini CLI	Compatible	Standard SKILL.md skills/claw-release/SKILL.md	`.gemini/skills/<skill-name>/`
GitHub Copilot	Compatible	Standard SKILL.md skills/claw-release/SKILL.md	`.github/skills/<skill-name>/`
OpenCode	Compatible	Standard SKILL.md skills/claw-release/SKILL.md	`.opencode/skills/<skill-name>/`

Native The repository ships a manifest, folder or frontmatter field for this agent.
Compatible A standard SKILL.md that this agent can read.
Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

Explore alternatives and comparisons

Add this badge to your README

It updates every night and links to this page.

[![prompt-security/clawsec on hotskills](https://hotskills.dev/badge/prompt-security-clawsec.svg)](https://hotskills.dev/skill/prompt-security-clawsec/)

prompt-security/clawsec

History

skills/claw-release/SKILL.md

skills/clawsec-clawhub-checker/SKILL.md

skills/clawsec-feed/SKILL.md

skills/clawsec-nanoclaw/SKILL.md

skills/clawsec-scanner/SKILL.md

skills/clawsec-suite/SKILL.md

skills/clawtributor/SKILL.md

skills/hermes-attestation-guardian/SKILL.md

skills/hermes-traffic-guardian/SKILL.md

skills/nanoclaw-traffic-guardian/SKILL.md

skills/openclaw-audit-watchdog/SKILL.md

skills/openclaw-traffic-guardian/SKILL.md

skills/picoclaw-security-guardian/SKILL.md

skills/picoclaw-self-pen-testing/SKILL.md

skills/picoclaw-traffic-guardian/SKILL.md

skills/soul-guardian/SKILL.md

Share this page

Heat

Stars over time

Individual skills in this repository

How it works

claw-release

Frontmatter

SKILL.md

Reference documents

The playbook

Scripts executed separately

Files

clawsec-clawhub-checker

Frontmatter

SKILL.md

Reference documents

The playbook

Scripts executed separately

Files

clawsec-feed

Frontmatter

SKILL.md

Reference documents

The playbook

Files

clawsec-nanoclaw

Frontmatter

SKILL.md

Reference documents

The playbook

Scripts executed separately

Files

clawsec-scanner

Frontmatter

SKILL.md

Reference documents

The playbook

Scripts executed separately

Files

clawsec-suite

Frontmatter

SKILL.md

Reference documents

The playbook

Scripts executed separately

Files

clawtributor

Frontmatter

SKILL.md

Reference documents

The playbook

Files

hermes-attestation-guardian

Frontmatter

SKILL.md

Reference documents

The playbook

Scripts executed separately

Files

hermes-traffic-guardian

Frontmatter

SKILL.md

`skills/claw-release/SKILL.md`

`skills/clawsec-clawhub-checker/SKILL.md`

`skills/clawsec-feed/SKILL.md`

`skills/clawsec-nanoclaw/SKILL.md`

`skills/clawsec-scanner/SKILL.md`

`skills/clawsec-suite/SKILL.md`

`skills/clawtributor/SKILL.md`

`skills/hermes-attestation-guardian/SKILL.md`

`skills/hermes-traffic-guardian/SKILL.md`

`skills/nanoclaw-traffic-guardian/SKILL.md`

`skills/openclaw-audit-watchdog/SKILL.md`

`skills/openclaw-traffic-guardian/SKILL.md`

`skills/picoclaw-security-guardian/SKILL.md`

`skills/picoclaw-self-pen-testing/SKILL.md`

`skills/picoclaw-traffic-guardian/SKILL.md`

`skills/soul-guardian/SKILL.md`

`README.md`

`advisories/feed.json`

`scripts/release-skill.sh`

`skills/claw-release/.clawhubignore`

`skills/claw-release/CHANGELOG.md`

`skills/claw-release/SKILL.md`

`skills/claw-release/skill.json`

`skills/clawsec-clawhub-checker/CHANGELOG.md`

`skills/clawsec-clawhub-checker/SKILL.md`

`skills/clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjs`

`skills/clawsec-clawhub-checker/scripts/check_clawhub_reputation.mjs`

`skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs`

`skills/clawsec-clawhub-checker/scripts/setup_reputation_hook.mjs`

`skills/clawsec-clawhub-checker/skill.json`