← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-41387
OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization
CVE-2026-41386
OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes
CVE-2026-41373
OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy
CVE-2026-41355
OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion
CVE-2026-41350
OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations
CVE-2026-41303
OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands
CVE-2026-41302
OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download
CVE-2026-41294
OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File
CVE-2026-35653
OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request
CVE-2026-35640
OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing