← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-100559
OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
CVE-2026-32988
OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation
CVE-2026-32976
OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands
CVE-2026-32971
OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands
CVE-2026-32970
OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs
CVE-2026-32921
OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run
CVE-2026-32916
OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes
CVE-2026-41369
OpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution
CVE-2026-41366
OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting
CVE-2026-27646
OpenClaw < 2026.3.7 - Sandbox Escape via /acp spawn Command