https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:10:36.755454+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-35662 BREW-openclaw-cli-CVE-2026-35662 — OpenClaw leaf subagents can bypass controlScope restrictions to send messages to child sessions 2026-10-04T09:10:36.830221+00:00

Affected: Homebrew: openclaw-cli

## Summary Leaf subagents could still use the send action to message controlled child sessions even when their controlScope was narrower than children.

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: < 2026.3.22 - Fixed: >= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`

## Fix Commit(s) - `7679eb375294941b02214c234aff3948796969d0`

## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.

## Code-Level Confirmation - src/auto-reply/reply/commands-subagents/action-send.ts now threads controller context through the send path. - src/agents/subagent-control.ts now blocks send attempts unless the requester owns the target and has controlScope="children".

OpenClaw thanks @space08 for reporting.

 https://cve.radiocsirt.org/vuln/euvd-2026-329539 EUVD-2026-329539 2026-10-04T09:10:36.830295+00:00 EUVD-2026-329539 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35662 fkie_cve-2026-35662 2026-10-04T09:10:36.830313+00:00

OpenClaw before 2026.3.22 fails to enforce controlScope restrictions on the send action, allowing leaf subagents to message controlled child sessions beyond their authorized scope. Attackers can exploit this by using the send action to communicate with child sessions without proper scope validation, bypassing intended access control restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-x2cm-hg9c-mf5w GHSA-x2cm-hg9c-mf5w — OpenClaw leaf subagents can bypass controlScope restrictions to send messages to child sessions 2026-10-04T09:10:36.830338+00:00

Affected: npm: openclaw

## Summary Leaf subagents could still use the send action to message controlled child sessions even when their controlScope was narrower than children.

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: < 2026.3.22 - Fixed: >= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`

## Fix Commit(s) - `7679eb375294941b02214c234aff3948796969d0`

## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.

## Code-Level Confirmation - src/auto-reply/reply/commands-subagents/action-send.ts now threads controller context through the send path. - src/agents/subagent-control.ts now blocks send attempts unless the requester owns the target and has controlScope="children".

OpenClaw thanks @space08 for reporting.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0884 WID-SEC-W-2026-0884 — OpenClaw: Mehrere Schwachstellen 2026-10-04T09:10:36.830368+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte, einschließlich Administratorrechte, zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.