← All credits
smaeljaish771
14 vulnerability records and advisories credit this contributor.
CVE-2026-35660
OpenClaw < 2026.3.23 - Insufficient Access Control in Gateway Agent Session Reset
CVE-2026-35634
OpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway
CVE-2026-35618
OpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verification
CVE-2026-42429
OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication
CVE-2026-43575
OpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Route
CVE-2026-42430
OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling
CVE-2026-41403
OpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request Misclassification
CVE-2026-41388
OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling
CVE-2026-41402
OpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypass
CVE-2026-41372
OpenClaw < 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP Discovery