← All credits
lintsinghua
5 vulnerability records and advisories credit this contributor.
CVE-2026-32920
OpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins
CVE-2026-32917
OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP
CVE-2026-35656
OpenClaw < 2026.3.22 - XFF Loopback Spoofing Bypass in Canvas Authentication and Rate Limiter
CVE-2026-33575
OpenClaw < 2026.3.12 - Long-lived Credential Exposure in Pairing Setup Codes
CVE-2026-32974
OpenClaw < 2026.3.12 - Forged Event Injection via Feishu Webhook Verification Token