← All credits
Edward-x (@YLChen-007)
19 vulnerability records and advisories credit this contributor.
CVE-2026-53806
OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation
CVE-2026-41384
OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend
CVE-2026-41349
OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch
CVE-2026-35668
OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters
CVE-2026-35667
OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts
CVE-2026-35666
OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper
CVE-2026-35658
OpenClaw < 2026.3.2 - Filesystem Boundary Bypass in Image Tool
CVE-2026-35633
OpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responses
CVE-2026-35632
OpenClaw <= 2026.2.22 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update