← All credits
KeenSecurityLab
91 vulnerability records and advisories credit this contributor.
CVE-2026-42434
OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing
CVE-2026-43535
OpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches
CVE-2026-43571
OpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup
CVE-2026-42430
OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling
CVE-2026-42423
OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout Fallback
CVE-2026-41396
OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root
CVE-2026-41403
OpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request Misclassification
CVE-2026-41910
OpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel Writes
CVE-2026-41391
OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling
CVE-2026-42420
OpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validation