https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:13:21.306072+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338641 EUVD-2026-338641 2026-10-03T15:13:21.367827+00:00 EUVD-2026-338641 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62209 fkie_cve-2026-62209 2026-10-03T15:13:21.367864+00:00

OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which could ignore the toolsAllow policy check. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could perform actions that should have required a stronger authorization or policy check.

 https://cve.radiocsirt.org/vuln/ghsa-8x5v-5gh2-qr2j GHSA-8x5v-5gh2-qr2j 2026-10-03T15:13:21.367898+00:00

OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which could ignore the toolsAllow policy check. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could perform actions that should have required a stronger authorization or policy check.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 WID-SEC-W-2026-2133 — OpenClaw: Mehrere Schwachstellen 2026-10-03T15:13:21.367915+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.