← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32048
OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
CVE-2026-32043
OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter
CVE-2026-32042
OpenClaw < 2026.2.25 - Privilege Escalation via Unpaired Device Identity in Shared Gateway Authentication
CVE-2026-32038
OpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter
CVE-2026-32037
OpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling
CVE-2026-32035
OpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript Handler
CVE-2026-32033
OpenClaw < 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary Validation
CVE-2026-32031
OpenClaw < 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels Gateway
CVE-2026-32028
OpenClaw < 2026.2.25 - Missing Authorization Check in Discord DM Reaction Ingress
CVE-2026-32027
OpenClaw < 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group Allowlist