https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:35:22.520365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45003 CVE-2026-45003 — OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files 2026-10-07T02:35:22.535879+00:00

Affected: OpenClaw

OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access can redirect runtime traffic to malicious endpoints by setting endpoint variables in dotenv files.