https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:39:26 +0000 https://cve.radiocsirt.org/vuln/cve-2026-35655 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers can spoof tool identities through rawInput parameters to suppress dangerous-tool prompting and bypass security restrictions.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers can spoof tool identities through rawInput parameters to suppress dangerous-tool prompting and bypass security restrictions.</p> https://cve.radiocsirt.org/vuln/cve-2026-35655 https://cve.radiocsirt.org/vuln/ghsa-74wf-h43j-vvmj <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary ACP permission resolution trusted conflicting tool identity hints from rawInput and metadata, which could suppress dangerous-tool prompting.</p> <p>## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: &lt; 2026.3.22 - Fixed: &gt;= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`</p> <p>## Fix Commit(s) - `e4c61723cd2d530680cc61789311d464ab8cdf60`</p> <p>## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.</p> <p>## Code-Level Confirmation - src/acp/client.ts now fails closed when meta, rawInput, and title tool identities conflict instead of trusting spoofable raw input. - src/acp/client.test.ts ships regressions for conflicting tool identity hints and dangerous-tool prompting.</p> <p>OpenClaw thanks @zpbrent for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary ACP permission resolution trusted conflicting tool identity hints from rawInput and metadata, which could suppress dangerous-tool prompting.</p> <p>## Affected Packages / Versions - Package: `openclaw` (npm) - Affected: &lt; 2026.3.22 - Fixed: &gt;= 2026.3.22 - Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) - Latest published npm version checked: `2026.3.23-2`</p> <p>## Fix Commit(s) - `e4c61723cd2d530680cc61789311d464ab8cdf60`</p> <p>## Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`.</p> <p>## Code-Level Confirmation - src/acp/client.ts now fails closed when meta, rawInput, and title tool identities conflict instead of trusting spoofable raw input. - src/acp/client.test.ts ships regressions for conflicting tool identity hints and dangerous-tool prompting.</p> <p>OpenClaw thanks @zpbrent for reporting.</p> https://cve.radiocsirt.org/vuln/ghsa-74wf-h43j-vvmj