Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.62%Mar 5, 2026
- High8.2OpenClaw versions prior to 2026.2.12 contain a vulnerability in the BlueBubbles (optional plugin) webhook handler in which it authenticates requests based solely on lo…Check if you run itEPSS 0.42%Mar 5, 2026
- High8.2OpenClaw versions prior to 2026.2.14 contain a local file inclusion vulnerability in BlueBubbles extension (must be installed and enabled) media path handling that all…Check if you run itEPSS 0.30%Mar 5, 2026
- High7.7OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintended binaries by manipulating PATH environment va…Check if you run itEPSS 0.48%Mar 5, 2026
- High8.7OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that allocates entire response payloads in memory before…Check if you run itEPSS 0.44%Mar 5, 2026
- Medium6.3OpenClaw versions prior to 2026.2.14 contain a webhook signature-verification bypass in the voice-call extension that allows unauthenticated requests when the tunnel.a…Check if you run itEPSS 0.30%Mar 5, 2026
- Medium6.8OpenClaw versions 2026.1.16-2 prior to 2026.2.14 contain a path traversal vulnerability in archive extraction during installation commands that allows arbitrary file w…Check if you run itEPSS 0.16%Mar 5, 2026
- High7.5OpenClaw versions 2026.1.5 prior to 2026.2.12 fail to enforce mandatory authentication on the /agent/act browser-control HTTP route, allowing unauthorized local caller…Check if you run itEPSS 0.20%Mar 5, 2026
- High8.4OpenClaw versions prior to 2026.2.12 construct transcript file paths using unsanitized sessionId parameters and sessionFile paths without enforcing directory containment.Check if you run itEPSS 0.14%Mar 5, 2026
- Medium5.9OpenClaw versions 2026.1.30 and earlier, contain an information disclosure vulnerability, patched in 2026.2.1, in the MS Teams attachment downloader (optional extensio…Check if you run itEPSS 0.27%Mar 5, 2026
- Medium6.9OpenClaw versions prior to 2026.2.14 contain an authorization bypass vulnerability where Telegram allowlist matching accepts mutable usernames instead of immutable num…Check if you run itEPSS 0.22%Mar 5, 2026
- High8.7OpenClaw versions prior to 2026.2.13 contain a denial of service vulnerability in webhook handlers that buffer request bodies without strict byte or time limits.Check if you run itEPSS 0.46%Mar 5, 2026
- Medium5.9OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection.Check if you run itEPSS 0.14%Mar 5, 2026
- Medium6.3OpenClaw versions prior to 2026.2.14 contain a server-side request forgery vulnerability in the optional Tlon Urbit extension that accepts user-provided base URLs for…Check if you run itEPSS 0.26%Mar 5, 2026
- Critical9.3OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for allowlist validation, allowing at…Check if you run itEPSS 0.50%Mar 5, 2026
- High7.2OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by…Check if you run itEPSS 0.30%Mar 5, 2026
- Critical9.2OpenClaw versions prior to 2026.2.2 contain a vulnerability in the gateway WebSocket connect handshake in which it allows skipping device identity checks when auth.tok…Check if you run itEPSS 0.37%Mar 5, 2026
- Medium6.3OpenClaw version 2026.1.14-1 prior to 2026.2.2, with the Matrix plugin installed and enabled, contain a vulnerability in which DM allowlist matching could be bypassed…Check if you run itEPSS 0.24%Mar 5, 2026
- Critical9.2OpenClaw versions prior to 2026.2.2 contain an exec approvals (must be enabled) allowlist bypass vulnerability that allows attackers to execute arbitrary commands by i…Check if you run itEPSS 0.50%Mar 5, 2026
- High8.2OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting w…Check if you run itEPSS 0.31%Mar 5, 2026
- High8.5OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gatew…Check if you run itEPSS 0.15%Mar 5, 2026
- Medium6.3OpenClaw versions prior to 2026.2.2 contain a server-side request forgery vulnerability in attachment and media URL hydration that allows remote attackers to fetch arb…Check if you run itEPSS 0.42%Mar 5, 2026
- Critical9.4OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing…Check if you run itEPSS 0.45%Mar 5, 2026
- High8.2OpenClaw's voice-call plugin versions before 2026.2.3 contain an improper authentication vulnerability in webhook verification that allows remote attackers to bypass v…Check if you run itEPSS 0.40%Mar 5, 2026
- High8.6OpenClaw versions prior to 2026.2.14 contain an arbitrary file read vulnerability in the exec-approvals allowlist validation that checks pre-expansion argv tokens but…Check if you run itEPSS 0.18%Mar 5, 2026
Sort