https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:40:26.806089+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-42424 BREW-openclaw-cli-CVE-2026-42424 — OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration 2026-10-06T04:40:26.855740+00:00

Affected: Homebrew: openclaw-cli

## Impact

Shared reply MEDIA: paths are treated as trusted and can trigger cross-channel local file exfiltration.

A crafted shared reply MEDIA reference could cause another channel to read a local file path as trusted generated media.

OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.

## Affected Packages / Versions

- Package: `openclaw` (npm) - Affected versions: `<=2026.4.4` - Patched versions: `2026.4.8`

## Fix

The issue was fixed on `main` and is available in the patched npm version listed above. The verified fixed tree is commit `d7c3210cd6f5fdfdc1beff4c9541673e814354d5`.

## Verification

The fix was re-checked against `main` before publication, including targeted regression tests for the affected security boundary.

## Credits

Thanks @threalwinky for reporting.

 https://cve.radiocsirt.org/vuln/euvd-2026-307822 EUVD-2026-307822 2026-10-06T04:40:26.855809+00:00 EUVD-2026-307822 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42424 fkie_cve-2026-42424 2026-10-06T04:40:26.855826+00:00

OpenClaw before 2026.4.8 treats shared reply MEDIA paths as trusted, allowing crafted references to trigger cross-channel local file exfiltration. Attackers can exploit this by crafting malicious shared reply MEDIA references to cause another channel to read local file paths as trusted generated media.

 https://cve.radiocsirt.org/vuln/ghsa-qqq7-4hxc-x63c GHSA-qqq7-4hxc-x63c — OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration 2026-10-06T04:40:26.855850+00:00

Affected: npm: openclaw

## Impact

Shared reply MEDIA: paths are treated as trusted and can trigger cross-channel local file exfiltration.

A crafted shared reply MEDIA reference could cause another channel to read a local file path as trusted generated media.

OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.

## Affected Packages / Versions

- Package: `openclaw` (npm) - Affected versions: `<=2026.4.4` - Patched versions: `2026.4.8`

## Fix

The issue was fixed on `main` and is available in the patched npm version listed above. The verified fixed tree is commit `d7c3210cd6f5fdfdc1beff4c9541673e814354d5`.

## Verification

The fix was re-checked against `main` before publication, including targeted regression tests for the affected security boundary.

## Credits

Thanks @threalwinky for reporting.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1005 WID-SEC-W-2026-1005 — OpenClaw: Mehrere Schwachstellen 2026-10-06T04:40:26.855880+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.