Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-100685 CVE record

CVSS 8.3 High

Budibase before 3.45.0 Information Disclosure via Chat Links
- budibase server
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100679 CVE record

CVSS 7.1 High

stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
- stoatchat
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100670 CVE record

CVSS 8.7 High

Grav CMS 2.0.14 through 2.0.24 Privilege Escalation via Blueprint Guard Bypass
- grav
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100634 CVE record

CVSS 5.3 Medium

SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows
- siyuan
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100633 CVE record

CVSS 8.5 High

SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations
- siyuan
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100629 CVE record

CVSS 7.0 High

Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100628 CVE record

CVSS 8.7 High

capgo.app before 12.128.12 Authentication Bypass via apikey
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100627 CVE record

CVSS 7.2 High

Capgo bundle promotion API channel RBAC deny override bypass
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100623 CVE record

CVSS 8.7 High

Capgo Authentication Bypass via Direct PostgREST org_users Table Write
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100621 CVE record

CVSS 5.3 Medium

capgo.app Content-Lock Bypass via r2-direct Bundle Mutation
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100618 CVE record

CVSS 8.7 High

Capgo App Icon Update Privilege Escalation via Service-Role Worker
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100617 CVE record

CVSS 8.7 High

Cap-go capgo.app Authorization Bypass via channel_permission_overrides
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100616 CVE record

CVSS 7.0 High

capgo.app Authentication Bypass via PostgREST customer_id Mutation
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100614 CVE record

CVSS 8.7 High

Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100613 CVE record

CVSS 6.0 Medium

capgo.app Authorization Bypass via Stale Channel Permission Overrides
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100612 CVE record

CVSS 8.6 High

Capgo SSO Provider ID Authentication Bypass via Incomplete Migration
- Cap-go capgo.app
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100610 CVE record

CVSS 7.7 High

Flowise through 3.1.4 Missing Authorization via upsert-history
- Flowise
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100609 CVE record

CVSS 7.6 High

Flowise through 3.1.4 Insecure Direct Object Reference via Credential
- Flowise
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100608 CVE record

CVSS 8.7 High

Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard
- Flowise
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100605 CVE record

CVSS 7.5 High

Flowise through 3.1.4 Missing Authorization via Chat Message Routes
- Flowise
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100604 CVE record

CVSS 5.3 Medium

ClawHub Authentication Bypass via Former Publisher Skill Control
- openclaw clawhub
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100602 CVE record

CVSS 7.1 High

ClawHub Changelog Preview Information Disclosure via Authorization Bypass
- openclaw clawhub
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-96532 CVE record

CVSS 7.5 High

Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update
- Testimonials Widget
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-96525 CVE record

CVSS 2.7 Low

MCP Server for WordPress < 1.8.2 - Contributor+ Workflow Modification and Deletion via Missing Ownership Check
- MCP Server for WordPress
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100596 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100593 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authentication Bypass via activation
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100592 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100591 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authentication Bypass via Active Memory
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100590 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.7.1 Authorization Bypass via voice set
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100589 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100588 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Authentication Bypass via node.invoke
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100587 CVE record

CVSS 8.7 High

OpenClaw before 2026.7.1 Authorization Bypass via Codex Install
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100585 CVE record

CVSS 8.6 High

OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100583 CVE record

CVSS 5.3 Medium

OpenClaw Discord before 2026.7.1 Authorization Bypass
- openclaw discord
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100579 CVE record

CVSS 7.2 High

OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100575 CVE record

CVSS 8.7 High

OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM
- openclaw slack
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100573 CVE record

CVSS 4.8 Medium

OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100566 CVE record

CVSS 6.9 Medium

OpenClaw LINE before 2026.8.1 Access Control Inheritance
- openclaw line
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100562 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Authorization Bypass via sessions.create
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100560 CVE record

CVSS 7.7 High

OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100557 CVE record

CVSS 8.7 High

OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100556 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100553 CVE record

CVSS 5.3 Medium

OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100552 CVE record

CVSS 8.7 High

OpenClaw before 2026.8.1 Policy Bypass via Native Tools
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100550 CVE record

CVSS 5.3 Medium

OpenClaw before 2026.8.1 Authentication Bypass via Access Group
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100545 CVE record

CVSS 6.0 Medium

OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100544 CVE record

CVSS 8.7 High

openclaw voice-call before 2026.8.1 Authorization Bypass
- openclaw voice-call
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100540 CVE record

CVSS 7.6 High

OpenClaw Feishu before 2026.8.1 Authentication Bypass via Disabled Account
- openclaw feishu
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100539 CVE record

CVSS 2.1 Low

OpenClaw before 2026.8.1 Memory Access Control Bypass
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100538 CVE record

CVSS 7.1 High

OpenClaw before 2026.8.1 Local File Read via Outbound Attachments
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100537 CVE record

CVSS 2.3 Low

OpenClaw before 2026.8.1 Authentication Bypass via Active Memory
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100535 CVE record

CVSS 7.7 High

OpenClaw before 2026.8.1 Privilege Escalation via Session Memory
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100534 CVE record

CVSS 2.3 Low

OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100532 CVE record

CVSS 7.2 High

openclaw WhatsApp before 2026.8.1 Authentication Bypass
- openclaw whatsapp
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100531 CVE record

CVSS 7.1 High

openclaw Slack before 2026.8.1 Authorization Bypass
- openclaw slack
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100530 CVE record

CVSS 8.5 High

OpenClaw before 2026.8.1 Exec Approval Directory Binding
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100529 CVE record

CVSS 7.4 High

OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer
- OpenClaw
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100526 CVE record

CVSS 6.0 Medium

Vulnerability in discord
- openclaw discord
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-100525 CVE record

CVSS 5.3 Medium

OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass
- openclaw diagnostics-prometheus
- Broken access control
Not analysed yet 26 Sept 2026
CVE-2026-63431 CVE record

CVSS 6.5 Medium

Horilla: Missing Authorization on Payroll Component Views Exposes Employee Salary Structures and Personal Loan Records (IDOR)
- horilla-hr
- Broken access control
Not analysed yet 25 Sept 2026