https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:06:25.644535+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-35637 BREW-openclaw-cli-CVE-2026-35637 — OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete 2026-10-02T17:06:25.647724+00:00

Affected: Homebrew: openclaw-cli

## Summary Tlon cite expansion happened before channel and DM authorization completed, allowing cite work and content handling before the final auth decision.

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: < 2026.3.22 - Fixed: >= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`

## Fix Commit(s) - `3cbf932413e41d1836cb91aed1541a28a3122f93` - `ebee4e2210e1f282a982c7ef2ad79d77a572fc87`

## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.

## Code-Level Confirmation - extensions/tlon/src/monitor/index.ts now defers cite expansion until after authorization and preserves explicit empty-allowlist semantics. - extensions/tlon/src/monitor/utils.ts and extensions/tlon/src/security.test.ts ship the deferred cite expansion behavior and regressions.

OpenClaw thanks @zpbrent for reporting.

 https://cve.radiocsirt.org/vuln/euvd-2026-329514 EUVD-2026-329514 2026-10-02T17:06:25.647783+00:00 EUVD-2026-329514 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35637 fkie_cve-2026-35637 2026-10-02T17:06:25.647800+00:00

OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Attackers can exploit this timing vulnerability to access or manipulate content before proper authorization validation occurs.

 https://cve.radiocsirt.org/vuln/ghsa-vfg3-pqpq-93m4 GHSA-vfg3-pqpq-93m4 — OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete 2026-10-02T17:06:25.647822+00:00

Affected: npm: openclaw

## Summary Tlon cite expansion happened before channel and DM authorization completed, allowing cite work and content handling before the final auth decision.

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: < 2026.3.22 - Fixed: >= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`

## Fix Commit(s) - `3cbf932413e41d1836cb91aed1541a28a3122f93` - `ebee4e2210e1f282a982c7ef2ad79d77a572fc87`

## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.

## Code-Level Confirmation - extensions/tlon/src/monitor/index.ts now defers cite expansion until after authorization and preserves explicit empty-allowlist semantics. - extensions/tlon/src/monitor/utils.ts and extensions/tlon/src/security.test.ts ship the deferred cite expansion behavior and regressions.

OpenClaw thanks @zpbrent for reporting.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0856 WID-SEC-W-2026-0856 — OpenClaw: Mehrere Schwachstellen 2026-10-02T17:06:25.647852+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.