https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:52:40.362106+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-41378 BREW-openclaw-cli-CVE-2026-41378 — OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch 2026-10-05T09:52:40.425804+00:00

Affected: Homebrew: openclaw-cli

## Summary Paired node escalates to gateway RCE via unrestricted node.event agent dispatch

## Current Maintainer Triage - Status: narrow - Normalized severity: high - Assessment: v2026.3.28 still lets paired role=node clients drive node.event agent.request into broader gateway-side tool access than node RPCs, but critical is overstated because a trusted paired node foothold is already required.

## Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version: `2026.3.31` - Vulnerable version range: `<=2026.3.28` - Patched versions: `>= 2026.3.31` - First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s) - `a77928b1087e90f2a8903f8e5aca6dec9237ac62` — 2026-03-30T14:22:15+01:00

OpenClaw thanks @AntAISecurityLab for reporting.

 https://cve.radiocsirt.org/vuln/euvd-2026-307915 EUVD-2026-307915 2026-10-05T09:52:40.425870+00:00 EUVD-2026-307915 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41378 fkie_cve-2026-41378 2026-10-05T09:52:40.425887+00:00

OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted gateway-side tool access. Attackers with trusted paired node credentials can escalate privileges by leveraging unrestricted agent.request dispatch to achieve remote code execution on the gateway.

 https://cve.radiocsirt.org/vuln/ghsa-gjm7-hw8f-73rq GHSA-gjm7-hw8f-73rq — OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch 2026-10-05T09:52:40.425911+00:00

Affected: npm: openclaw

## Summary Paired node escalates to gateway RCE via unrestricted node.event agent dispatch

## Current Maintainer Triage - Status: narrow - Normalized severity: high - Assessment: v2026.3.28 still lets paired role=node clients drive node.event agent.request into broader gateway-side tool access than node RPCs, but critical is overstated because a trusted paired node foothold is already required.

## Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version: `2026.3.31` - Vulnerable version range: `<=2026.3.28` - Patched versions: `>= 2026.3.31` - First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s) - `a77928b1087e90f2a8903f8e5aca6dec9237ac62` — 2026-03-30T14:22:15+01:00

OpenClaw thanks @AntAISecurityLab for reporting.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0948 WID-SEC-W-2026-0948 — OpenClaw: Mehrere Schwachstellen 2026-10-05T09:52:40.425940+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.