https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:20:45.130130+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-378859 EUVD-2026-378859 2026-10-04T17:20:45.178866+00:00 EUVD-2026-378859 https://cve.radiocsirt.org/vuln/fkie_cve-2026-100544 fkie_cve-2026-100544 2026-10-04T17:20:45.178902+00:00

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent's configuration. The issue is fixed in 2026.8.1.

 https://cve.radiocsirt.org/vuln/ghsa-3w3q-3hpq-fv5m GHSA-3w3q-3hpq-fv5m 2026-10-04T17:20:45.178939+00:00

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent's configuration. The issue is fixed in 2026.8.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3316 WID-SEC-W-2026-3316 — OpenClaw: Mehrere Schwachstellen 2026-10-04T17:20:45.178960+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.