← All credits
KeenSecurityLab
91 vulnerability records and advisories credit this contributor.
CVE-2026-53863
OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy
CVE-2026-53818
OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback
CVE-2026-53809
OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy
CVE-2026-53808
OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow
CVE-2026-53807
OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom
CVE-2026-45006
OpenClaw < 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypass
CVE-2026-45002
OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping
CVE-2026-45001
OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access
CVE-2026-44999
OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events
CVE-2026-44998
OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools