https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:06:48.260422+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-27663 cnvd-2026-27663 2026-10-04T13:06:48.340678+00:00 cnvd-2026-27663 https://cve.radiocsirt.org/vuln/euvd-2026-337804 EUVD-2026-337804 2026-10-04T13:06:48.340716+00:00 EUVD-2026-337804 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62195 fkie_cve-2026-62195 2026-10-04T13:06:48.340731+00:00

OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature that allows lower-trust callers to execute owner-only tools. Attackers can bypass authorization checks through configured input paths to execute or persist actions beyond their intended permissions.

 https://cve.radiocsirt.org/vuln/ghsa-5pr8-xjq5-2wrc GHSA-5pr8-xjq5-2wrc 2026-10-04T13:06:48.340760+00:00

OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature that allows lower-trust callers to execute owner-only tools. Attackers can bypass authorization checks through configured input paths to execute or persist actions beyond their intended permissions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 WID-SEC-W-2026-2133 — OpenClaw: Mehrere Schwachstellen 2026-10-04T13:06:48.340777+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.