2026

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definit

OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges.

OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operan

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write perm

OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to

OpenClaw before 2026.3.31 contains an environment variable leakage vulnerability in SSH-based sandbox backends that pass

OpenClaw before 2026.3.31 fails to terminate active WebSocket sessions when rotating device tokens. Attackers with previ

OpenClaw before 2026.3.28 contains an arbitrary code execution vulnerability in mirror mode that converts untrusted sand

OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows leg

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attac

OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node

OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Bas

OpenClaw before 2026.3.31 contains a session visibility bypass vulnerability where the session_status function fails to

OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execu

OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths

OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mod

OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allow

OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Aut

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scop

OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing attackers

OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persis

OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direc

OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration in

OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin auth

OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows atta

OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attac

OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, e

OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that

OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce

OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumv

OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CON

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypher

Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perfo

Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privilege

Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofin

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.

A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_commo

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the

Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a net

Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.

radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to exe

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to re

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recurs

A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only

A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without an

SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-spe

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GET /api/v1

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignme