WID-SEC-W-2026-3316
Vulnerability from csaf_certbund - Published: 2026-09-10 22:00 - Updated: 2026-09-27 22:00Summary
OpenClaw: Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: OpenClaw ist ein persönlicher KI-Assistent zur Ausführung auf eigenen Geräten.
Angriff: Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
Betroffene Betriebssysteme: - Sonstiges
- UNIX
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source OpenClaw <2026.9.4
Open Source / OpenClaw
|
<2026.9.4 |
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
Affected products
Known affected
1 product, the same list as for
CVE-2026-100525
References
78 references
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "OpenClaw ist ein pers\u00f6nlicher KI-Assistent zur Ausf\u00fchrung auf eigenen Ger\u00e4ten.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen oder andere, nicht n\u00e4her spezifizierte Angriffe durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-3316 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3316.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-3316 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3316"
},
{
"category": "external",
"summary": "OpenClaw Security Advisories vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-224w-vfr9-h35c vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-224w-vfr9-h35c"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-22v4-33m3-8p7m vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-356g-m7rx-7pm3 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-356g-m7rx-7pm3"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-35wj-hm2r-ghgw vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-35wj-hm2r-ghgw"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-39hf-qg99-f4qv vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-39hf-qg99-f4qv"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-3mq7-q27j-mq7q vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-3mq7-q27j-mq7q"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-4g58-43jr-6738 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-4g58-43jr-6738"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-4hwv-rj92-h7rp vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-4hwv-rj92-h7rp"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-4r25-35qc-fr6j vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-4r25-35qc-fr6j"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-4wvr-f35r-f8w4 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-4wvr-f35r-f8w4"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-58qx-6m8p-wh2j vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-58qx-6m8p-wh2j"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-5fwv-rrvp-8xvr vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5fwv-rrvp-8xvr"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-5j27-v2pw-cj9m vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j27-v2pw-cj9m"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-5j57-84cx-r295 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-5m4g-88rg-69pj vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-5mrc-77hj-xjxv vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5mrc-77hj-xjxv"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-5rx7-34fw-64qg vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5rx7-34fw-64qg"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-5x6q-wg56-rxg8 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-62qm-6fjj-6g23 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-62qm-6fjj-6g23"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-66hm-hxq3-5pfh vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-66hm-hxq3-5pfh"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-6xpv-wwr5-265h vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-6xpv-wwr5-265h"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-72p2-79fg-pvph vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-72p2-79fg-pvph"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-74gc-hg2m-79p9 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-74gc-hg2m-79p9"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-7cp7-87pj-p32v vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-7cp7-87pj-p32v"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-7jfq-rmfm-29wp vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-7jfq-rmfm-29wp"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-8938-r7c6-54vq vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-8938-r7c6-54vq"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-89cw-7452-cfrf vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-89cw-7452-cfrf"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-8xxh-v4vc-qvm4 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-8xxh-v4vc-qvm4"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-9f86-pvv5-rxfw vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9f86-pvv5-rxfw"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-9m4p-cqp4-jppq vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9m4p-cqp4-jppq"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-9p6m-2872-xm7x vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9p6m-2872-xm7x"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-9x88-f7rh-4c83 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-9x88-f7rh-4c83"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-cf95-m4jv-59rc vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-cf95-m4jv-59rc"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-chr6-w4m5-57fv vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-chr6-w4m5-57fv"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-crg9-c62w-j2p5 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-crg9-c62w-j2p5"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-fgwg-c3wv-8f45 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fgwg-c3wv-8f45"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-fphf-69cp-h5xw vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-fvxr-9g24-x3hf vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fvxr-9g24-x3hf"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-fw6q-2frm-jxxr vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fw6q-2frm-jxxr"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-g24w-m94m-59qc vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-g24w-m94m-59qc"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-g697-vv6h-r8hv vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-g697-vv6h-r8hv"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-g7fw-3gjp-g5hf vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-gcm4-fmcp-2f9r vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-ghpx-6xwq-2w4w vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-ghpx-6xwq-2w4w"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-h2qg-fxpv-82v6 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-h2qg-fxpv-82v6"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-h9jh-75j7-7hhx vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-h9jh-75j7-7hhx"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-hgv5-f2r3-6v9r vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-hgv5-f2r3-6v9r"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-hpg5-cq3m-phqp vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-hpg5-cq3m-phqp"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-j4mm-p864-vx7f vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-j4mm-p864-vx7f"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-jghr-xp78-995p vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-jghr-xp78-995p"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-jjpc-p3xf-8g7p vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-jjpc-p3xf-8g7p"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-m78m-7h3q-q938 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-m78m-7h3q-q938"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-mm7m-wcgh-8mfq vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-mm7m-wcgh-8mfq"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-p3h6-v2h4-36q2 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-p3h6-v2h4-36q2"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-p5g8-m35v-7m82 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-p5g8-m35v-7m82"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-pfrw-r5vr-89hw vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-pfrw-r5vr-89hw"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-pjjr-5qhr-5w6r vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-pjjr-5qhr-5w6r"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-q9j5-4xr6-xqqw vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-q9j5-4xr6-xqqw"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-qgj5-6x35-9g6f vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-qgj5-6x35-9g6f"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-qw7m-h363-33qw vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-qw7m-h363-33qw"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-r88x-r7jj-f2cf vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-r88x-r7jj-f2cf"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-rgjw-6v73-php6 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-rgjw-6v73-php6"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-rm45-4jx5-2927 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-rrxp-5mx8-mvhh vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-rx8p-qcpv-c7vr vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-rx8p-qcpv-c7vr"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-v7hh-7676-rg67 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-v7hh-7676-rg67"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-vhpg-cq3w-v8p9 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-vhpg-cq3w-v8p9"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-w5x7-c87m-3jpc vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-w5x7-c87m-3jpc"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-wjfv-5qch-m5vj vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-wjfv-5qch-m5vj"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-wwcw-jfpp-gpxw vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwcw-jfpp-gpxw"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-wwx7-573h-pqwc vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-wwx7-573h-pqwc"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-xvwp-wmh2-fq48 vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-xvwp-wmh2-fq48"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-xw48-j584-r73h vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw48-j584-r73h"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-xw9g-7xvv-gcjc vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc"
},
{
"category": "external",
"summary": "GitHub Security Advisory GHSA-xx9p-hc9w-6p5h vom 2026-09-10",
"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-xx9p-hc9w-6p5h"
}
],
"source_lang": "en-US",
"title": "OpenClaw: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-09-27T22:00:00.000+00:00",
"generator": {
"date": "2026-09-28T06:16:35.062+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-3316",
"initial_release_date": "2026-09-10T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-09-10T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-09-22T22:00:00.000+00:00",
"number": "2",
"summary": "Referenz(en) aufgenommen: CVE-2026-95815, EUVD-2026-84862"
},
{
"date": "2026-09-27T22:00:00.000+00:00",
"number": "3",
"summary": "Referenz(en) aufgenommen: CVE-2026-100546, EUVD-2026-87504, CVE-2026-100589, EUVD-2026-87462, CVE-2026-100588, EUVD-2026-87463, CVE-2026-100587, EUVD-2026-87464, CVE-2026-100525, EUVD-2026-87525, CVE-2026-100526, EUVD-2026-87524, CVE-2026-100531, EUVD-2026-87519, CVE-2026-100532, EUVD-2026-87518, CVE-2026-100585, EUVD-2026-87466, CVE-2026-100540, EUVD-2026-87510, CVE-2026-100584, EUVD-2026-87467, CVE-2026-100581, EUVD-2026-87470, CVE-2026-100541, EUVD-2026-87509, CVE-2026-100580, EUVD-2026-87471, CVE-2026-100544, EUVD-2026-87506, CVE-2026-100579, EUVD-2026-87472, CVE-2026-100566, EUVD-2026-87485, CVE-2026-100578, EUVD-2026-87473, CVE-2026-100575, EUVD-2026-87476, CVE-2026-100577, EUVD-2026-87474, CVE-2026-100582, EUVD-2026-87469, CVE-2026-100570, EUVD-2026-87481, CVE-2026-100595, EUVD-2026-87456, GHSA-CQ6M-MHGC-VQRG, CVE-2026-100569, EUVD-2026-87482, CVE-2026-100594, EUVD-2026-87457, CVE-2026-100593, EUVD-2026-87458, CVE-2026-100592, EUVD-2026-87459, CVE-2026-100591, EUVD-2026-87460, CVE-2026-100583, EUVD-2026-87468, CVE-2026-100568, EUVD-2026-87483, CVE-2026-100586, EUVD-2026-87465, CVE-2026-100567, EUVD-2026-87484, CVE-2026-100564, EUVD-2026-87486, CVE-2026-100563, EUVD-2026-87487, CVE-2026-100562, EUVD-2026-87488, CVE-2026-100598, EUVD-2026-87380, GHSA-P9CW-VR9C-P446, CVE-2026-100599, EUVD-2026-87381, GHSA-2VM8-MPC3-CH96, CVE-2026-100597, EUVD-2026-87454, CVE-2026-100596, EUVD-2026-87455, GHSA-2GWV-Q898-554M, CVE-2026-100576, EUVD-2026-87475, CVE-2026-100574, EUVD-2026-87477, CVE-2026-100573, EUVD-2026-87478, CVE-2026-100572, EUVD-2026-87479, CVE-2026-100571, EUVD-2026-87480, CVE-2026-100561, EUVD-2026-87489, CVE-2026-100560, EUVD-2026-87490, CVE-2026-100559, EUVD-2026-87491, CVE-2026-100558, EUVD-2026-87492, CVE-2026-100557, EUVD-2026-87493, CVE-2026-100556, EUVD-2026-87494, CVE-2026-100555, EUVD-2026-87495, CVE-2026-100554, EUVD-2026-87496, CVE-2026-100553, EUVD-2026-87497, CVE-2026-100552, EUVD-2026-87498, CVE-2026-100551, EUVD-2026-87499, CVE-2026-100550, EUVD-2026-87500, CVE-2026-100549, EUVD-2026-87501, CVE-2026-100548, EUVD-2026-87502, CVE-2026-100547, EUVD-2026-87503, CVE-2026-100545, EUVD-2026-87505, CVE-2026-100543, EUVD-2026-87507, CVE-2026-100542, EUVD-2026-87508, CVE-2026-100539, EUVD-2026-87511, CVE-2026-100538, EUVD-2026-87512, CVE-2026-100537, EUVD-2026-87513, CVE-2026-100536, EUVD-2026-87514, CVE-2026-100535, EUVD-2026-87515, CVE-2026-100534, EUVD-2026-87516, CVE-2026-100533, EUVD-2026-87517, CVE-2026-100529, EUVD-2026-87521, CVE-2026-100530, EUVD-2026-87520, CVE-2026-100528, EUVD-2026-87522, CVE-2026-100527, EUVD-2026-87523, GHSA-3FP8-R6R3-VJCC, GHSA-6C5G-HRQV-57WR, GHSA-87G7-76GR-73G8, GHSA-CQQJ-25GC-9Q2F, GHSA-MWM7-GR2G-859H, GHSA-W63F-M9C2-9G74, CVE-2026-100590, EUVD-2026-87461"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2026.9.4",
"product": {
"name": "Open Source OpenClaw \u003c2026.9.4",
"product_id": "T059388"
}
},
{
"category": "product_version",
"name": "2026.9.4",
"product": {
"name": "Open Source OpenClaw 2026.9.4",
"product_id": "T059388-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:openclaw:openclaw:2026.9.4"
}
}
}
],
"category": "product_name",
"name": "OpenClaw"
}
],
"category": "vendor",
"name": "Open Source"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-100525",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100525"
},
{
"cve": "CVE-2026-100526",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100526"
},
{
"cve": "CVE-2026-100527",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100527"
},
{
"cve": "CVE-2026-100528",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100528"
},
{
"cve": "CVE-2026-100529",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100529"
},
{
"cve": "CVE-2026-100530",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100530"
},
{
"cve": "CVE-2026-100531",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100531"
},
{
"cve": "CVE-2026-100532",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100532"
},
{
"cve": "CVE-2026-100533",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100533"
},
{
"cve": "CVE-2026-100534",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100534"
},
{
"cve": "CVE-2026-100535",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100535"
},
{
"cve": "CVE-2026-100536",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100536"
},
{
"cve": "CVE-2026-100537",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100537"
},
{
"cve": "CVE-2026-100538",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100538"
},
{
"cve": "CVE-2026-100539",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100539"
},
{
"cve": "CVE-2026-100540",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100540"
},
{
"cve": "CVE-2026-100541",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100541"
},
{
"cve": "CVE-2026-100542",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100542"
},
{
"cve": "CVE-2026-100543",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100543"
},
{
"cve": "CVE-2026-100544",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100544"
},
{
"cve": "CVE-2026-100545",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100545"
},
{
"cve": "CVE-2026-100546",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100546"
},
{
"cve": "CVE-2026-100547",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100547"
},
{
"cve": "CVE-2026-100548",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100548"
},
{
"cve": "CVE-2026-100549",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100549"
},
{
"cve": "CVE-2026-100550",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100550"
},
{
"cve": "CVE-2026-100551",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100551"
},
{
"cve": "CVE-2026-100552",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100552"
},
{
"cve": "CVE-2026-100553",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100553"
},
{
"cve": "CVE-2026-100554",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100554"
},
{
"cve": "CVE-2026-100555",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100555"
},
{
"cve": "CVE-2026-100556",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100556"
},
{
"cve": "CVE-2026-100557",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100557"
},
{
"cve": "CVE-2026-100558",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100558"
},
{
"cve": "CVE-2026-100559",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100559"
},
{
"cve": "CVE-2026-100560",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100560"
},
{
"cve": "CVE-2026-100561",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100561"
},
{
"cve": "CVE-2026-100562",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100562"
},
{
"cve": "CVE-2026-100563",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100563"
},
{
"cve": "CVE-2026-100564",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100564"
},
{
"cve": "CVE-2026-100566",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100566"
},
{
"cve": "CVE-2026-100567",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100567"
},
{
"cve": "CVE-2026-100568",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100568"
},
{
"cve": "CVE-2026-100569",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100569"
},
{
"cve": "CVE-2026-100570",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100570"
},
{
"cve": "CVE-2026-100571",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100571"
},
{
"cve": "CVE-2026-100572",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100572"
},
{
"cve": "CVE-2026-100573",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100573"
},
{
"cve": "CVE-2026-100574",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100574"
},
{
"cve": "CVE-2026-100575",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100575"
},
{
"cve": "CVE-2026-100576",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100576"
},
{
"cve": "CVE-2026-100577",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100577"
},
{
"cve": "CVE-2026-100578",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100578"
},
{
"cve": "CVE-2026-100579",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100579"
},
{
"cve": "CVE-2026-100580",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100580"
},
{
"cve": "CVE-2026-100581",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100581"
},
{
"cve": "CVE-2026-100582",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100582"
},
{
"cve": "CVE-2026-100583",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100583"
},
{
"cve": "CVE-2026-100584",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100584"
},
{
"cve": "CVE-2026-100585",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100585"
},
{
"cve": "CVE-2026-100586",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100586"
},
{
"cve": "CVE-2026-100587",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100587"
},
{
"cve": "CVE-2026-100588",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100588"
},
{
"cve": "CVE-2026-100589",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100589"
},
{
"cve": "CVE-2026-100590",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100590"
},
{
"cve": "CVE-2026-100591",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100591"
},
{
"cve": "CVE-2026-100592",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100592"
},
{
"cve": "CVE-2026-100593",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100593"
},
{
"cve": "CVE-2026-100594",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100594"
},
{
"cve": "CVE-2026-100595",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100595"
},
{
"cve": "CVE-2026-100596",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100596"
},
{
"cve": "CVE-2026-100597",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100597"
},
{
"cve": "CVE-2026-100598",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100598"
},
{
"cve": "CVE-2026-100599",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-100599"
},
{
"cve": "CVE-2026-95815",
"product_status": {
"known_affected": [
"T059388"
]
},
"release_date": "2026-09-10T22:00:00.000+00:00",
"title": "CVE-2026-95815"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…