← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32065
OpenClaw < 2026.2.25 - Approval Identity Mismatch in system.run Command Execution
CVE-2026-32058
OpenClaw < 2026.2.26 - Approval Context-Binding Weakness in system.run via host=node
CVE-2026-32057
OpenClaw < 2026.2.25 - Authentication Bypass via Control UI client.id Parameter
CVE-2026-32056
OpenClaw < 2026.2.22 - Remote Code Execution via Shell Startup Environment Variable Injection in system.run
CVE-2026-32055
OpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink
CVE-2026-32054
OpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling
CVE-2026-32052
OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers
CVE-2026-32051
OpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access
CVE-2026-32050
OpenClaw < 2026.2.25 - Unauthorized Reaction Status Event Enqueue via Access Check Bypass
CVE-2026-32049
OpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass