← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-27545
OpenClaw < 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory Rebind
CVE-2026-27524
OpenClaw < 2026.2.21 - Prototype Pollution via Debug Override Path
CVE-2026-27523
OpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Paths
CVE-2026-22217
OpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variable Trusted Prefix Fallback
CVE-2026-22181
OpenClaw < 2026.3.2 - DNS Pinning Bypass via Environment Proxy Configuration in web_fetch
CVE-2026-22180
OpenClaw < 2026.3.2 - Path Confinement Bypass in Browser Output and File Write Operations
CVE-2026-22179
OpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run
CVE-2026-22176
OpenClaw < 2026.2.19 - Command Injection via Unescaped Environment Variables in Windows Scheduled Task Script Generation
CVE-2026-22174
OpenClaw < 2026.2.22 - Gateway Token Disclosure via Chrome CDP Probe
CVE-2026-22170
OpenClaw < 2026.2.22 BlueBubbles - Access Control Bypass via Empty allowFrom Configuration