qclawer

OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search

OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping

OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope

OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy

OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback

OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy

OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow

OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom

OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping

OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access