https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:06:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-340392 EUVD-2026-340392 https://cve.radiocsirt.org/vuln/euvd-2026-340392 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62216 <p>OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator&#39;s configuration and whether lower-trust input can reach that path.</p> <p>OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator&#39;s configuration and whether lower-trust input can reach that path.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-62216 https://cve.radiocsirt.org/vuln/ghsa-2x38-rcq4-g4qr <p>OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator&#39;s configuration and whether lower-trust input can reach that path.</p> <p>OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator&#39;s configuration and whether lower-trust input can reach that path.</p> https://cve.radiocsirt.org/vuln/ghsa-2x38-rcq4-g4qr https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133 <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2133