← All credits
Edward-x (@YLChen-007)
19 vulnerability records and advisories credit this contributor.
CVE-2026-62196
OpenClaw 2026.3.22 < 2026.6.6 Authorization Bypass via WhatsApp Group IDs
CVE-2026-53838
OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection
CVE-2026-53836
OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases
CVE-2026-62195
OpenClaw 2026.5.20 < 2026.6.6 Authorization Bypass via MCP loopback
CVE-2026-53866
OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing
CVE-2026-53862
OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening
CVE-2026-53860
OpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles
CVE-2026-53841
OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML
CVE-2026-53851
OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass
CVE-2026-53840
OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects