← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32005
OpenClaw < 2026.2.25 - Authorization Bypass in Interactive Callbacks via Sender Check Skip
CVE-2026-32004
OpenClaw < 2026.3.2 - Authentication Bypass via Encoded Path in /api/channels Route
CVE-2026-32003
OpenClaw < 2026.2.22 - Remote Code Execution via SHELLOPTS/PS4 Environment Injection in system.run
CVE-2026-32002
OpenClaw < 2026.2.23 - Sandbox Boundary Bypass via Image Tool workspaceOnly Bypass
CVE-2026-32001
OpenClaw < 2026.2.22 - Node Role Device-Identity Bypass via WebSocket Authentication
CVE-2026-31999
OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback
CVE-2026-31998
OpenClaw 2026.2.22 < 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIds
CVE-2026-31997
OpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run Approvals
CVE-2026-31995
OpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Extension
CVE-2026-31994
OpenClaw < 2026.2.19 - Local Command Injection via Unsafe cmd Argument Handling in Windows Scheduled Task Script Generation