← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-22169
OpenClaw < 2026.2.22 - Allowlist Bypass via sort Configuration in safeBins
CVE-2026-22168
OpenClaw < 2026.2.21 - Command Injection via cmd.exe /c Trailing Arguments in system.run
CVE-2026-41355
OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion
CVE-2026-43577
OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes
CVE-2026-41387
OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization
CVE-2026-41386
OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes
CVE-2026-41373
OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy
CVE-2026-41350
OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations
CVE-2026-41302
OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download
CVE-2026-41303
OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands