https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:15:54 +0000 https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-41367 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Summary</p> <p>Discord button and component interaction ingress did not consistently reapply the same guild and channel policy gates used for normal inbound messages.</p> <p>## Impact</p> <p>Users could trigger privileged component actions from contexts that should have been blocked by Discord channel policy.</p> <p>## Affected Component</p> <p>`extensions/discord/src/monitor/agent-components.ts`</p> <p>## Fixed Versions</p> <p>- Affected: `&gt;= 2026.2.14, &lt;= 2026.3.24` - Patched: `&gt;= 2026.3.28` - Latest stable `2026.3.28` contains the fix.</p> <p>## Fix</p> <p>Fixed by commit `511093d4b3` (`Discord: apply component interaction policy gates`).</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Summary</p> <p>Discord button and component interaction ingress did not consistently reapply the same guild and channel policy gates used for normal inbound messages.</p> <p>## Impact</p> <p>Users could trigger privileged component actions from contexts that should have been blocked by Discord channel policy.</p> <p>## Affected Component</p> <p>`extensions/discord/src/monitor/agent-components.ts`</p> <p>## Fixed Versions</p> <p>- Affected: `&gt;= 2026.2.14, &lt;= 2026.3.24` - Patched: `&gt;= 2026.3.28` - Latest stable `2026.3.28` contains the fix.</p> <p>## Fix</p> <p>Fixed by commit `511093d4b3` (`Discord: apply component interaction policy gates`).</p> https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-41367 https://cve.radiocsirt.org/vuln/euvd-2026-321178 EUVD-2026-321178 https://cve.radiocsirt.org/vuln/euvd-2026-321178 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41367 <p>OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component actions from blocked contexts by bypassing channel policy enforcement.</p> <p>OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component actions from blocked contexts by bypassing channel policy enforcement.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41367 https://cve.radiocsirt.org/vuln/ghsa-9xc4-v83w-73v2 <p>OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component actions from blocked contexts by bypassing channel policy enforcement.</p> <p>OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component actions from blocked contexts by bypassing channel policy enforcement.</p> https://cve.radiocsirt.org/vuln/ghsa-9xc4-v83w-73v2 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0930 <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0930