← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-27183
OpenClaw < 2026.3.7 - Shell Approval Gating Bypass via Dispatch Wrapper Depth Mismatch
CVE-2026-35653
OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request
CVE-2026-35640
OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing
CVE-2026-35635
OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat
CVE-2026-35631
OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands
CVE-2026-35620
OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands
CVE-2026-33574
OpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Download
CVE-2026-33573
OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters
CVE-2026-32987
OpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device Pairing
CVE-2026-32979
OpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval