← All credits
Nathan (@nexrin)
19 vulnerability records and advisories credit this contributor.
CVE-2026-41367
OpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions
CVE-2026-41362
OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication
CVE-2026-44992
OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv
CVE-2026-44110
OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store
CVE-2026-41398
OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridge
CVE-2026-41396
OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root
CVE-2026-41393
OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area Discovery
CVE-2026-41391
OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling
CVE-2026-41380
OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables
CVE-2026-41348
OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands