← All credits
KeenSecurityLab
91 vulnerability records and advisories credit this contributor.
CVE-2026-44111
OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get
CVE-2026-43580
OpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions
CVE-2026-43570
OpenClaw 2026.3.22 < 2026.4.5 - Symlink Traversal in Remote Marketplace Repository Path Handling
CVE-2026-43534
OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events
CVE-2026-43528
OpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliases
CVE-2026-42436
OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes
CVE-2026-43566
OpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events
CVE-2026-43572
OpenClaw 2026.4.10 < 2026.4.14 - Missing Sender Authorization in Microsoft Teams SSO Invoke Handler
CVE-2026-43531
OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File
CVE-2026-43573
OpenClaw < 2026.4.10 - SSRF Policy Bypass in Existing-Session Browser Interaction Routes