← All credits
zsx (@zsxsoft)
52 vulnerability records and advisories credit this contributor.
CVE-2026-53837
OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers
CVE-2026-53835
OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings
CVE-2026-53828
OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement
CVE-2026-53834
OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands
CVE-2026-53818
OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback
CVE-2026-53809
OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy
CVE-2026-53808
OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow
CVE-2026-53807
OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom
CVE-2026-53861
OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS
CVE-2026-53854
OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands