← All credits
cantinagen
11 vulnerability records and advisories credit this contributor.
CVE-2026-53832
OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration
CVE-2026-53831
OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist
CVE-2026-53829
OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display
CVE-2026-53820
OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn
CVE-2026-53817
OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing
CVE-2026-53816
OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node
CVE-2026-53814
OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority
CVE-2026-53812
OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions
CVE-2026-53810
OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata
CVE-2026-53855
OpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks