← All credits
AntAISecurityLab
31 vulnerability records and advisories credit this contributor.
CVE-2026-41352
OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass
CVE-2026-41351
OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding
CVE-2026-41347
OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints
CVE-2026-41345
OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download
CVE-2026-41338
OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations
CVE-2026-41334
OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass
CVE-2026-41331
OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription
CVE-2026-41330
OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy
CVE-2026-41329
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation
CVE-2026-41297
OpenClaw < 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download Redirect