https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:03:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341808 EUVD-2026-341808 https://cve.radiocsirt.org/vuln/euvd-2026-341808 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62187 <p>OpenClaw Feishu tools (npm package @openclaw/feishu) in versions &lt;= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected feature.</p> <p>OpenClaw Feishu tools (npm package @openclaw/feishu) in versions &lt;= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected feature.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-62187 https://cve.radiocsirt.org/vuln/ghsa-mm88-h44m-w2gp <p>OpenClaw Feishu tools (npm package @openclaw/feishu) in versions &lt;= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected feature.</p> <p>OpenClaw Feishu tools (npm package @openclaw/feishu) in versions &lt;= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected feature.</p> https://cve.radiocsirt.org/vuln/ghsa-mm88-h44m-w2gp https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133