https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:54:19 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-27666 cnvd-2026-27666 https://cve.radiocsirt.org/vuln/cnvd-2026-27666 https://cve.radiocsirt.org/vuln/euvd-2026-337996 EUVD-2026-337996 https://cve.radiocsirt.org/vuln/euvd-2026-337996 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62193 <p>OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy (authorization) check. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path could execute or persist actions beyond the caller&#39;s intended authorization. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected path. The issue is fixed in 2026.6.9.</p> <p>OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy (authorization) check. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path could execute or persist actions beyond the caller&#39;s intended authorization. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected path. The issue is fixed in 2026.6.9.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-62193 https://cve.radiocsirt.org/vuln/ghsa-wfxc-2q5g-mm98 <p>OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy (authorization) check. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path could execute or persist actions beyond the caller&#39;s intended authorization. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected path. The issue is fixed in 2026.6.9.</p> <p>OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy (authorization) check. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path could execute or persist actions beyond the caller&#39;s intended authorization. Impact depends on the operator&#39;s configuration and whether lower-trust input can reach the affected path. The issue is fixed in 2026.6.9.</p> https://cve.radiocsirt.org/vuln/ghsa-wfxc-2q5g-mm98 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133