← All credits
Nathan (@nexrin)
19 vulnerability records and advisories credit this contributor.
CVE-2026-41343
OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency
CVE-2026-41342
OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding
CVE-2026-41341
OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord Extension
CVE-2026-41336
OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override
CVE-2026-35670
OpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat
CVE-2026-35659
OpenClaw < 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discovery
CVE-2026-35651
OpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt
CVE-2026-35638
OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UI
CVE-2026-35636
OpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolution