https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:18:52.305269+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-100590 fkie_cve-2026-100590 2026-09-28T19:18:52.498967+00:00

OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gateway voice configuration. Attackers with command access can change the voice used by Talk responses for the configured provider, affecting configuration integrity without exposing credentials or granting additional host capabilities.

 https://vulnerability.circl.lu/vuln/ghsa-mh98-4wwc-cp33 GHSA-mh98-4wwc-cp33 2026-09-28T19:18:52.499106+00:00

OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gateway voice configuration. Attackers with command access can change the voice used by Talk responses for the configured provider, affecting configuration integrity without exposing credentials or granting additional host capabilities.