{"uuid": "1cc98169-928e-48d4-a39a-42f033258619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100520", "type": "seen", "source": "https://gist.github.com/ichintu/649a1fe76b80e5c473482da09368e350", "content": "On September 26, 2026, two high-severity vulnerabilities were disclosed: **CVE-2026-100530** affects OpenClaw (pre-2026.8.1), allowing approved commands to bypass directory context and execute against unreviewed files (Severity: 8.5), while **CVE-2026-100520** impacts Laranode (pre-1.2.1), enabling authenticated users to exploit path traversal in file uploads to deploy cross-tenant code (Severity: 8.8). Both require immediate patching.", "creation_timestamp": "2026-09-26T04:00:21.000000Z"}