https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:41:16.516359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-53824 BREW-openclaw-cli-CVE-2026-53824 — OpenClaw: Mattermost slash token revocation could lag until monitor refresh 2026-10-04T06:41:16.777176+00:00

Affected: Homebrew: openclaw-cli

### Summary

Mattermost slash token revocation could lag until monitor refresh. In affected versions, a caller with an old Mattermost slash token during the refresh window could continue accepting the old token until the monitor refreshed.

This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.

### Impact

When the affected feature is enabled and reachable, this could invoke slash command behavior briefly after token revocation. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.

### Patched Versions

The first stable patched version is `2026.4.24`.

### Mitigations

restart or refresh the Mattermost monitor after token rotation until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.

 https://cve.radiocsirt.org/vuln/euvd-2026-327263 EUVD-2026-327263 2026-10-04T06:41:16.777272+00:00 EUVD-2026-327263 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53824 fkie_cve-2026-53824 2026-10-04T06:41:16.777299+00:00

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. Attackers can exploit stale token acceptance to invoke slash command behavior briefly after token revocation, potentially executing unauthorized actions depending on operator configuration.

 https://cve.radiocsirt.org/vuln/ghsa-8rhr-7x4c-49j6 GHSA-8rhr-7x4c-49j6 2026-10-04T06:41:16.777348+00:00

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. Attackers can exploit stale token acceptance to invoke slash command behavior briefly after token revocation, potentially executing unauthorized actions depending on operator configuration.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1738 WID-SEC-W-2026-1738 — OpenClaw: Mehrere Schwachstellen 2026-10-04T06:41:16.777375+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsmechanismen zu umgehen, erhöhte Berechtigungen zu erlangen, Informationen offenzulegen, Konfigurationen zu manipulieren, beliebige Befehle oder Code auszuführen sowie interne Systeme über SSRF anzugreifen.