OpenClaw: Focus command could miss controlScope enforcement

CVE-2026-53850

### Summary Focus command could miss controlScope enforcement. In affected versions, a caller able to trigger the focus

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install

CVE-2026-53846

### Summary Workspace .env npm_execpath could influence bundled runtime dependency install. In affected versions, a wor

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns

CVE-2026-53853

### Summary OpenClaw's exec allowlist supported optional `argPattern` entries to restrict the arguments accepted for an

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers

CVE-2026-53860

### Summary BlueBubbles sender policy could match mutable conversation identifiers. In affected versions, a participant

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: memory-wiki shared search could miss session visibility checks

CVE-2026-53844

### Summary memory-wiki shared search could miss session visibility checks. In affected versions, a caller able to sear

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Config recovery could restore openclaw.json with broad file permissions

CVE-2026-53856

### Summary Config recovery could restore openclaw.json with broad file permissions. In affected versions, a local reco

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Zalo allowFrom could bind to mutable display names

CVE-2026-53857

### Summary Zalo allowFrom could bind to mutable display names. In affected versions, a Zalo friend or contact with mut

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Skill-command dispatch could skip before-tool-call hooks

CVE-2026-53845

### Summary Skill-command dispatch could skip before-tool-call hooks. In affected versions, a skill command routed thro

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Active Memory write scope could mutate global config

CVE-2026-53847

### Summary Active Memory write scope could mutate global config. In affected versions, a Gateway caller with `operator

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Exported session HTML could keep unsafe markdown links

CVE-2026-53841

### Summary Exported session HTML could keep unsafe markdown links. In affected versions, content rendered into an expo

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Slack reaction events could ignore reaction notification settings

CVE-2026-53851

### Summary Slack reaction events could ignore reaction notification settings. In affected versions, a Slack reaction e

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Bootstrap token replay could widen pending pairing scopes

CVE-2026-53862

### Summary Bootstrap token replay could widen pending pairing scopes. In affected versions, a caller with access to a

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Shell positional parameters could weaken strict inline-eval checks

CVE-2026-53855

### Summary Shell positional parameters could weaken strict inline-eval checks. In affected versions, a command request

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently

CVE-2026-53859

### Summary Hostname checks could treat trailing-dot hosts inconsistently. In affected versions, a request path that ac

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Exec allowlist could miss side effects from transparent command wrappers

CVE-2026-53848

### Summary Exec allowlist could miss side effects from transparent command wrappers. In affected versions, a command r

历史摘要 · 未重新核验 · GitHub Advisory

budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL

### Summary This advisory covers three distinct SQL Injection vulnerabilities within Budibase's database connectors (Pos

历史摘要 · 未重新核验 · GitHub Advisory

@acastellon/auth: Authentication bypass via spoofable headers in validateToken()

@acastellon/auth v2.2.0 appears to allow an unauthenticated authentication bypass in validateToken() through spoofable a

历史摘要 · 未重新核验 · GitHub Advisory

AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)

## Summary Two inbound-mail handlers act on a privileged effect without verifying that the sender is the operator, while

历史摘要 · 未重新核验 · GitHub Advisory

AgenticMail: Cross-agent task authorization bypass in AgenticMail API

## Summary A low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supp

历史摘要 · 未重新核验 · GitHub Advisory

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

CVE-2026-9595

### Impact When a user-configured proxy on `webpack-dev-server` has a broad context (e.g. `/`) and `ws: true`, it also

历史摘要 · 未重新核验 · GitHub Advisory