https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:30:16.171128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341808 EUVD-2026-341808 2026-10-04T08:30:16.229254+00:00 EUVD-2026-341808 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62187 fkie_cve-2026-62187 2026-10-04T08:30:16.229317+00:00

OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator's configuration and whether lower-trust input can reach the affected feature.

 https://cve.radiocsirt.org/vuln/ghsa-mm88-h44m-w2gp GHSA-mm88-h44m-w2gp 2026-10-04T08:30:16.229393+00:00

OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator's configuration and whether lower-trust input can reach the affected feature.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 WID-SEC-W-2026-2133 — OpenClaw: Mehrere Schwachstellen 2026-10-04T08:30:16.229427+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.