← All credits
Edward-x (@YLChen-007)
19 vulnerability records and advisories credit this contributor.
CVE-2026-62196
OpenClaw 2026.3.22 < 2026.6.6 Authorization Bypass via WhatsApp Group IDs
CVE-2026-62195
OpenClaw 2026.5.20 < 2026.6.6 Authorization Bypass via MCP loopback
CVE-2026-53806
OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation
CVE-2026-35668
OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters
CVE-2026-35667
OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts
CVE-2026-35666
OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper
CVE-2026-35658
OpenClaw < 2026.3.2 - Filesystem Boundary Bypass in Image Tool
CVE-2026-35633
OpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responses
CVE-2026-35632
OpenClaw <= 2026.2.22 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update
CVE-2026-53866
OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing