https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:21:56.787722+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-340392 EUVD-2026-340392 2026-10-03T22:21:56.847179+00:00 EUVD-2026-340392 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62216 fkie_cve-2026-62216 2026-10-03T22:21:56.847230+00:00

OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator's configuration and whether lower-trust input can reach that path.

 https://cve.radiocsirt.org/vuln/ghsa-2x38-rcq4-g4qr GHSA-2x38-rcq4-g4qr 2026-10-03T22:21:56.847267+00:00

OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator's configuration and whether lower-trust input can reach that path.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 WID-SEC-W-2026-2133 — OpenClaw: Mehrere Schwachstellen 2026-10-03T22:21:56.847293+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.