← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32003
OpenClaw < 2026.2.22 - Remote Code Execution via SHELLOPTS/PS4 Environment Injection in system.run
CVE-2026-32002
OpenClaw < 2026.2.23 - Sandbox Boundary Bypass via Image Tool workspaceOnly Bypass
CVE-2026-32001
OpenClaw < 2026.2.22 - Node Role Device-Identity Bypass via WebSocket Authentication
CVE-2026-31999
OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback
CVE-2026-31998
OpenClaw 2026.2.22 < 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIds
CVE-2026-31997
OpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run Approvals
CVE-2026-31995
OpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Extension
CVE-2026-31994
OpenClaw < 2026.2.19 - Local Command Injection via Unsafe cmd Argument Handling in Windows Scheduled Task Script Generation
CVE-2026-31993
OpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell Chains
CVE-2026-31992
OpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -S