← All credits
qclawer
46 vulnerability records and advisories credit this contributor.
CVE-2026-45002
OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping
CVE-2026-44998
OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools
CVE-2026-45001
OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access
CVE-2026-43583
OpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recovery
CVE-2026-43578
OpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade
CVE-2026-44110
OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store
CVE-2026-43585
OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution
CVE-2026-44111
OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get
CVE-2026-43580
OpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions
CVE-2026-43534
OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events