https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:42:40.454312+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-378299 EUVD-2026-378299 2026-10-04T05:42:40.459163+00:00 EUVD-2026-378299 https://cve.radiocsirt.org/vuln/fkie_cve-2026-102806 fkie_cve-2026-102806 2026-10-04T05:42:40.459195+00:00

OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared workspace directories through media pipeline functions that fail to restrict reads to the active session.

 https://cve.radiocsirt.org/vuln/ghsa-8f5c-296x-75hm GHSA-8f5c-296x-75hm 2026-10-04T05:42:40.459240+00:00

OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared workspace directories through media pipeline functions that fail to restrict reads to the active session.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3673 WID-SEC-W-2026-3673 — OpenClaw: Mehrere Schwachstellen 2026-10-04T05:42:40.459259+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.