https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:11:48.493043+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-35644 BREW-openclaw-cli-CVE-2026-35644 — OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status 2026-10-02T22:11:48.496713+00:00

Affected: Homebrew: openclaw-cli

## Summary Read-scoped gateway snapshots could expose credentials embedded in channel baseUrl and related endpoint fields.

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: < 2026.3.22 - Fixed: >= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`

## Fix Commit(s) - `f0202264d0de7ad345382b9008c5963bcefb01b7`

## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.

## Code-Level Confirmation - src/channels/account-snapshot-fields.ts now strips URL userinfo from channel status snapshot fields. - src/config/redact-snapshot.ts now redacts credential-bearing baseUrl and httpUrl fields while preserving safe context.

OpenClaw thanks @zpbrent for reporting.

 https://cve.radiocsirt.org/vuln/euvd-2026-329521 EUVD-2026-329521 2026-10-02T22:11:48.496778+00:00 EUVD-2026-329521 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35644 fkie_cve-2026-35644 2026-10-02T22:11:48.496794+00:00

OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel baseUrl and httpUrl fields. Attackers can access gateway snapshots via config.get and channels.status endpoints to retrieve sensitive authentication information from URL userinfo components.

 https://cve.radiocsirt.org/vuln/ghsa-cp2c-jpv3-3r5r GHSA-cp2c-jpv3-3r5r 2026-10-02T22:11:48.496817+00:00

OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel baseUrl and httpUrl fields. Attackers can access gateway snapshots via config.get and channels.status endpoints to retrieve sensitive authentication information from URL userinfo components.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0856 WID-SEC-W-2026-0856 — OpenClaw: Mehrere Schwachstellen 2026-10-02T22:11:48.496833+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.