← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32023
OpenClaw < 2026.2.24 - Approval Gating Bypass via Dispatch-Wrapper Depth-Cap Mismatch in system.run
CVE-2026-32020
OpenClaw < 2026.2.22 - Arbitrary File Read via Symlink Following in Static File Handler
CVE-2026-32016
OpenClaw < 2026.2.22 - Path Traversal via Basename-Only Allowlist Matching on macOS
CVE-2026-32013
OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods
CVE-2026-32010
OpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter
CVE-2026-32009
OpenClaw < 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBins
CVE-2026-32007
OpenClaw < 2026.2.23 - Sandbox Bypass in apply_patch Tool via Workspace-Only Check Bypass
CVE-2026-32006
OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Fallback in Group Allowlist
CVE-2026-32005
OpenClaw < 2026.2.25 - Authorization Bypass in Interactive Callbacks via Sender Check Skip
CVE-2026-32004
OpenClaw < 2026.3.2 - Authentication Bypass via Encoded Path in /api/channels Route