@thehackerwire.bsky.social🟠 CVE-2026-100541 - High (7.5)
OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8...
https://www.thehackerwire.com/vulnerability/CVE-2026-100541/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100535 - High (7.5)
OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating...
https://www.thehackerwire.com/vulnerability/CVE-2026-100535/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-18143 - Critical (9.8)
The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload i...
https://www.thehackerwire.com/vulnerability/CVE-2026-18143/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100544 - High (8.8)
openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic...
https://www.thehackerwire.com/vulnerability/CVE-2026-100544/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100543 - High (7.5)
OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100543/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100552 - High (8.8)
OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool polici...
https://www.thehackerwire.com/vulnerability/CVE-2026-100552/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100551 - High (8.3)
OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in...
https://www.thehackerwire.com/vulnerability/CVE-2026-100551/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100561 - High (8)
OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-byp...
https://www.thehackerwire.com/vulnerability/CVE-2026-100561/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100560 - High (7.5)
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Alway...
https://www.thehackerwire.com/vulnerability/CVE-2026-100560/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100559 - High (8)
OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines c...
https://www.thehackerwire.com/vulnerability/CVE-2026-100559/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100558 - High (7.5)
OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway list...
https://www.thehackerwire.com/vulnerability/CVE-2026-100558/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100557 - High (8.3)
OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dis...
https://www.thehackerwire.com/vulnerability/CVE-2026-100557/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100568 - High (8.3)
OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs,...
https://www.thehackerwire.com/vulnerability/CVE-2026-100568/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100567 - High (8.2)
OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 a...
https://www.thehackerwire.com/vulnerability/CVE-2026-100567/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100570 - High (7.8)
OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted work...
https://www.thehackerwire.com/vulnerability/CVE-2026-100570/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100580 - High (8.8)
OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the mode...
https://www.thehackerwire.com/vulnerability/CVE-2026-100580/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100579 - High (7.6)
OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in mess...
https://www.thehackerwire.com/vulnerability/CVE-2026-100579/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100578 - High (7.6)
OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure too...
https://www.thehackerwire.com/vulnerability/CVE-2026-100578/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100575 - High (8.8)
OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-perso...
https://www.thehackerwire.com/vulnerability/CVE-2026-100575/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100588 - High (8.3)
OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requir...
https://www.thehackerwire.com/vulnerability/CVE-2026-100588/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
