https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 17:53:52 +0000 https://vulnerability.circl.lu/vuln/cve-2026-44999 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events. Attackers can exploit this trust-labeling issue to strengthen prompt-injection attacks by rendering untrusted events as trusted System events.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events. Attackers can exploit this trust-labeling issue to strengthen prompt-injection attacks by rendering untrusted events as trusted System events.</p> https://vulnerability.circl.lu/vuln/cve-2026-44999 https://vulnerability.circl.lu/vuln/ghsa-57r2-h2wj-g887 <p><strong>Affected:</strong> npm: openclaw</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt; 2026.4.20` - Patched version: `2026.4.20`</p> <p>## Impact</p> <p>Output from webhook-triggered isolated cron agent runs could be queued into the main session awareness stream without `trusted: false`. That made the event render as a trusted `System:` event instead of an untrusted system event.</p> <p>This is a trust-labeling issue that can strengthen prompt-injection impact, but it does not directly bypass gateway auth, tool policy, or sandboxing. Severity is low.</p> <p>## Fix</p> <p>OpenClaw now preserves untrusted labels for isolated cron awareness events and forwards the trust flag through cron delivery helpers.</p> <p>Fix commit:</p> <p>- `f61896b03cc7031f51106a04566831f4ac2a0bd7`</p> <p>## Release</p> <p>Fixed in OpenClaw `2026.4.20`.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt; 2026.4.20` - Patched version: `2026.4.20`</p> <p>## Impact</p> <p>Output from webhook-triggered isolated cron agent runs could be queued into the main session awareness stream without `trusted: false`. That made the event render as a trusted `System:` event instead of an untrusted system event.</p> <p>This is a trust-labeling issue that can strengthen prompt-injection impact, but it does not directly bypass gateway auth, tool policy, or sandboxing. Severity is low.</p> <p>## Fix</p> <p>OpenClaw now preserves untrusted labels for isolated cron awareness events and forwards the trust flag through cron delivery helpers.</p> <p>Fix commit:</p> <p>- `f61896b03cc7031f51106a04566831f4ac2a0bd7`</p> <p>## Release</p> <p>Fixed in OpenClaw `2026.4.20`.</p> https://vulnerability.circl.lu/vuln/ghsa-57r2-h2wj-g887