https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:31:13 +0000 https://vulnerability.circl.lu/vuln/cve-2026-32036 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw gateway plugin versions prior to 2026.2.26 contain a path traversal vulnerability that allows remote attackers to bypass route authentication checks by manipulating /api/channels paths with encoded dot-segment traversal sequences. Attackers can craft alternate paths using encoded traversal patterns to access protected plugin channel routes when handlers normalize the incoming path, circumventing security controls.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw gateway plugin versions prior to 2026.2.26 contain a path traversal vulnerability that allows remote attackers to bypass route authentication checks by manipulating /api/channels paths with encoded dot-segment traversal sequences. Attackers can craft alternate paths using encoded traversal patterns to access protected plugin channel routes when handlers normalize the incoming path, circumventing security controls.</p> https://vulnerability.circl.lu/vuln/cve-2026-32036 https://vulnerability.circl.lu/vuln/ghsa-mwxv-35wr-4vvj <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary Gateway plugin route auth protection for `/api/channels` could be bypassed using encoded dot-segment traversal (for example `..%2f`) in path variants that plugin handlers normalize.</p> <p>### Affected Packages / Versions - Package: npm `openclaw` - Latest published vulnerable version: `2026.2.25` - Vulnerable version range: `&lt;= 2026.2.25` - Patched version: `2026.2.26` (planned next release)</p> <p>### Impact Under affected versions, crafted alternate paths could bypass gateway auth checks for protected plugin channel routes when plugin handlers decode/canonicalize the incoming path and then route to `/api/channels/...` handlers.</p> <p>### Fix Commit(s) - `258d615c45527ffda37cecd08cd268f97461bde0`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.26`). After npm publish, maintainers only need to publish the advisory.</p> <p>OpenClaw thanks @zpbrent for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary Gateway plugin route auth protection for `/api/channels` could be bypassed using encoded dot-segment traversal (for example `..%2f`) in path variants that plugin handlers normalize.</p> <p>### Affected Packages / Versions - Package: npm `openclaw` - Latest published vulnerable version: `2026.2.25` - Vulnerable version range: `&lt;= 2026.2.25` - Patched version: `2026.2.26` (planned next release)</p> <p>### Impact Under affected versions, crafted alternate paths could bypass gateway auth checks for protected plugin channel routes when plugin handlers decode/canonicalize the incoming path and then route to `/api/channels/...` handlers.</p> <p>### Fix Commit(s) - `258d615c45527ffda37cecd08cd268f97461bde0`</p> <p>### Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.26`). After npm publish, maintainers only need to publish the advisory.</p> <p>OpenClaw thanks @zpbrent for reporting.</p> https://vulnerability.circl.lu/vuln/ghsa-mwxv-35wr-4vvj