← All credits
KeenSecurityLab
91 vulnerability records and advisories credit this contributor.
CVE-2026-41381
OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist
CVE-2026-41388
OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling
CVE-2026-41395
OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3
CVE-2026-41402
OpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypass
CVE-2026-41393
OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area Discovery
CVE-2026-41380
OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables
CVE-2026-41385
OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass
CVE-2026-41398
OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridge
CVE-2026-41912
OpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigation
CVE-2026-41353
OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection