https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:44:06.693939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05034 bdu:2026-05034 2026-10-03T22:44:06.770510+00:00 bdu:2026-05034 https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-22174 BREW-openclaw-cli-CVE-2026-22174 — OpenClaw Loopback CDP probe can leak Gateway token to local listener 2026-10-03T22:44:06.770546+00:00

Affected: Homebrew: openclaw-cli

### Summary A local process can capture the OpenClaw Gateway auth token from Chrome CDP probe traffic on loopback.

### Details Affected versions inject `x-openclaw-relay-token` for loopback CDP URLs, and CDP reachability probes send that header to `/json/version`. If an attacker controls the probed loopback port, they can read that token and reuse it as Gateway bearer auth.

Relevant code paths (pre-fix): - `src/browser/extension-relay.ts` (`getChromeExtensionRelayAuthHeaders`) - `src/browser/cdp.helpers.ts` (`getHeadersWithAuth`) - `src/browser/chrome.ts` (`fetchChromeVersion`)

### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published (at triage): `2026.2.21-2` - Vulnerable: `<= 2026.2.21-2` - Patched: >= 2026.2.22

### Deployment Model Applicability This does **not** change OpenClaw’s documented security model for standard single-owner installs (you own the machine/VPS and trust local processes under that OS account boundary). Risk is for **non-standard shared-user/shared-host installs** where an untrusted local user/process can race/bind the loopback relay port.

### Impact - Local credential disclosure. - Follow-on impact depends on local deployment and enabled Gateway capabilities.

### Fix Commit(s) - `afa22acc4a09fdf32be8a167ae216bee85c30dad`

### Release Process Note Patched version is set to >= 2026.2.22 for the published release.

OpenClaw thanks @tdjackey for reporting.

 https://cve.radiocsirt.org/vuln/cnvd-2026-16052 cnvd-2026-16052 2026-10-03T22:44:06.770602+00:00 cnvd-2026-16052 https://cve.radiocsirt.org/vuln/euvd-2026-329358 EUVD-2026-329358 2026-10-03T22:44:06.770619+00:00 EUVD-2026-329358 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22174 fkie_cve-2026-22174 2026-10-03T22:44:06.770631+00:00

OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture the Gateway authentication token. An attacker controlling a loopback port can intercept CDP reachability probes to the /json/version endpoint and reuse the leaked token as Gateway bearer authentication.

 https://cve.radiocsirt.org/vuln/ghsa-v3j7-34xh-6g3w GHSA-v3j7-34xh-6g3w — OpenClaw Loopback CDP probe can leak Gateway token to local listener 2026-10-03T22:44:06.770653+00:00

Affected: npm: openclaw

### Summary A local process can capture the OpenClaw Gateway auth token from Chrome CDP probe traffic on loopback.

### Details Affected versions inject `x-openclaw-relay-token` for loopback CDP URLs, and CDP reachability probes send that header to `/json/version`. If an attacker controls the probed loopback port, they can read that token and reuse it as Gateway bearer auth.

Relevant code paths (pre-fix): - `src/browser/extension-relay.ts` (`getChromeExtensionRelayAuthHeaders`) - `src/browser/cdp.helpers.ts` (`getHeadersWithAuth`) - `src/browser/chrome.ts` (`fetchChromeVersion`)

### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published (at triage): `2026.2.21-2` - Vulnerable: `<= 2026.2.21-2` - Patched: >= 2026.2.22

### Deployment Model Applicability This does **not** change OpenClaw’s documented security model for standard single-owner installs (you own the machine/VPS and trust local processes under that OS account boundary). Risk is for **non-standard shared-user/shared-host installs** where an untrusted local user/process can race/bind the loopback relay port.

### Impact - Local credential disclosure. - Follow-on impact depends on local deployment and enabled Gateway capabilities.

### Fix Commit(s) - `afa22acc4a09fdf32be8a167ae216bee85c30dad`

### Release Process Note Patched version is set to >= 2026.2.22 for the published release.

OpenClaw thanks @tdjackey for reporting.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0472 WID-SEC-W-2026-0472 — OpenClaw: Mehrere Schwachstellen 2026-10-03T22:44:06.770690+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, sich erhöhte Berechtigungen zu verschaffen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.