Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:47:50 +0000 CVE-2026-32976 — OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands https://cve.radiocsirt.org/vuln/cve-2026-32976 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictions. Attackers with authorized access on one account can execute channel commands like /config set channels.&lt;provider&gt;.accounts.&lt;id&gt; to modify configuration on target accounts with configWrites: false.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictions. Attackers with authorized access on one account can execute channel commands like /config set channels.&lt;provider&gt;.accounts.&lt;id&gt; to modify configuration on target accounts with configWrites: false.</p> https://cve.radiocsirt.org/vuln/cve-2026-32976