https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T10:32:56.881848+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-62224 fkie_cve-2026-62224 2026-09-29T10:32:56.907753+00:00

OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.

 https://vulnerability.circl.lu/vuln/ghsa-fjfc-7x5g-g52w GHSA-fjfc-7x5g-g52w 2026-09-29T10:32:56.907843+00:00

OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2133 WID-SEC-W-2026-2133 — OpenClaw: Mehrere Schwachstellen 2026-09-29T10:32:56.907866+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.