https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:34:53 +0000 https://cve.radiocsirt.org/vuln/cve-2026-62216 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator&#39;s configuration and whether lower-trust input can reach that path.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator&#39;s configuration and whether lower-trust input can reach that path.</p> https://cve.radiocsirt.org/vuln/cve-2026-62216