← All credits
Edward-x (@YLChen-007)
19 vulnerability records and advisories credit this contributor.
CVE-2026-62196
OpenClaw 2026.3.22 < 2026.6.6 Authorization Bypass via WhatsApp Group IDs
CVE-2026-53838
OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection
CVE-2026-53836
OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases
CVE-2026-62195
OpenClaw 2026.5.20 < 2026.6.6 Authorization Bypass via MCP loopback
CVE-2026-53806
OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation
CVE-2026-35668
OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters
CVE-2026-35667
OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts
CVE-2026-35666
OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper
CVE-2026-35658
OpenClaw < 2026.3.2 - Filesystem Boundary Bypass in Image Tool
CVE-2026-35633
OpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responses