agentprime: openclaw

agentprime: openclawEvery new CVE for openclaw.https://agentprime.io/CVE-2026-102807: OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Tickethttps://agentprime.io/advisories/CVE-2026-102807/https://agentprime.io/advisories/CVE-2026-102807/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:22:40 GMTCVECVE-2026-102806: OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelineshttps://agentprime.io/advisories/CVE-2026-102806/https://agentprime.io/advisories/CVE-2026-102806/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:22:39 GMTCVECVE-2026-100599: OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chromehttps://agentprime.io/advisories/CVE-2026-100599/https://agentprime.io/advisories/CVE-2026-100599/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:18 GMTCVECVE-2026-100598: OpenClaw before 2026.7.1 Approval Binding Logic Errorhttps://agentprime.io/advisories/CVE-2026-100598/https://agentprime.io/advisories/CVE-2026-100598/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:18 GMTCVECVE-2026-100597: OpenClaw before 2026.7.1 Path Traversal via Filesystem Racehttps://agentprime.io/advisories/CVE-2026-100597/https://agentprime.io/advisories/CVE-2026-100597/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:17 GMTCVECVE-2026-100596: OpenClaw before 2026.7.1 Authorization Bypass via MCP Configurationhttps://agentprime.io/advisories/CVE-2026-100596/https://agentprime.io/advisories/CVE-2026-100596/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:16 GMTCVECVE-2026-100595: OpenClaw before 2026.7.1 Authorization Bypass via diagnosticshttps://agentprime.io/advisories/CVE-2026-100595/https://agentprime.io/advisories/CVE-2026-100595/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:16 GMTCVECVE-2026-100594: OpenClaw before 2026.7.1 Authorization Bypass via trajectory exporthttps://agentprime.io/advisories/CVE-2026-100594/https://agentprime.io/advisories/CVE-2026-100594/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:15 GMTCVECVE-2026-100593: OpenClaw before 2026.7.1 Authentication Bypass via activationhttps://agentprime.io/advisories/CVE-2026-100593/https://agentprime.io/advisories/CVE-2026-100593/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:14 GMTCVECVE-2026-100592: OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaminghttps://agentprime.io/advisories/CVE-2026-100592/https://agentprime.io/advisories/CVE-2026-100592/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:14 GMTCVECVE-2026-100591: OpenClaw before 2026.7.1 Authentication Bypass via Active Memoryhttps://agentprime.io/advisories/CVE-2026-100591/https://agentprime.io/advisories/CVE-2026-100591/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:13 GMTCVECVE-2026-100590: OpenClaw before 2026.7.1 Authorization Bypass via voice sethttps://agentprime.io/advisories/CVE-2026-100590/https://agentprime.io/advisories/CVE-2026-100590/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:12 GMTCVECVE-2026-100589: OpenClaw before 2026.7.1 Sandbox Bypass via Browser Nodehttps://agentprime.io/advisories/CVE-2026-100589/https://agentprime.io/advisories/CVE-2026-100589/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:12 GMTCVECVE-2026-100588: OpenClaw before 2026.7.1 Authentication Bypass via node.invokehttps://agentprime.io/advisories/CVE-2026-100588/https://agentprime.io/advisories/CVE-2026-100588/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:11 GMTCVECVE-2026-100587: OpenClaw before 2026.7.1 Authorization Bypass via Codex Installhttps://agentprime.io/advisories/CVE-2026-100587/https://agentprime.io/advisories/CVE-2026-100587/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:10 GMTCVECVE-2026-100586: OpenClaw Codex before 2026.7.1 Authorization Bypass via Bindhttps://agentprime.io/advisories/CVE-2026-100586/https://agentprime.io/advisories/CVE-2026-100586/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:10 GMTCVECVE-2026-100585: OpenClaw before 2026.7.1 Authentication Bypass via MCP Channelhttps://agentprime.io/advisories/CVE-2026-100585/https://agentprime.io/advisories/CVE-2026-100585/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:09 GMTCVECVE-2026-100584: OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadowshttps://agentprime.io/advisories/CVE-2026-100584/https://agentprime.io/advisories/CVE-2026-100584/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:08 GMTCVECVE-2026-100581: OpenClaw iOS before 2026.8.11 Credential Storage via Share Extensionhttps://agentprime.io/advisories/CVE-2026-100581/https://agentprime.io/advisories/CVE-2026-100581/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:06 GMTCVECVE-2026-100580: OpenClaw before 2026.7.1 Remote Code Execution via cron toolhttps://agentprime.io/advisories/CVE-2026-100580/https://agentprime.io/advisories/CVE-2026-100580/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:06 GMTCVECVE-2026-100579: OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requesterhttps://agentprime.io/advisories/CVE-2026-100579/https://agentprime.io/advisories/CVE-2026-100579/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:05 GMTCVECVE-2026-100578: OpenClaw before 2026.7.1 Authorization Bypass via chat.sendhttps://agentprime.io/advisories/CVE-2026-100578/https://agentprime.io/advisories/CVE-2026-100578/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:04 GMTCVECVE-2026-100577: OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Assethttps://agentprime.io/advisories/CVE-2026-100577/https://agentprime.io/advisories/CVE-2026-100577/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:04 GMTCVECVE-2026-100576: OpenClaw before 2026.8.1 SSRF via Browser Wait Predicateshttps://agentprime.io/advisories/CVE-2026-100576/https://agentprime.io/advisories/CVE-2026-100576/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:03 GMTCVECVE-2026-100574: OpenClaw before 2026.8.1 SSRF via Trusted-Host DNShttps://agentprime.io/advisories/CVE-2026-100574/https://agentprime.io/advisories/CVE-2026-100574/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:02 GMTCVECVE-2026-100573: OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopbackhttps://agentprime.io/advisories/CVE-2026-100573/https://agentprime.io/advisories/CVE-2026-100573/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:01 GMTCVECVE-2026-100572: OpenClaw before 2026.8.1 Denial of Service via Rate Limithttps://agentprime.io/advisories/CVE-2026-100572/https://agentprime.io/advisories/CVE-2026-100572/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:00 GMTCVECVE-2026-100571: OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypasshttps://agentprime.io/advisories/CVE-2026-100571/https://agentprime.io/advisories/CVE-2026-100571/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:19:00 GMTCVECVE-2026-100570: OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGShttps://agentprime.io/advisories/CVE-2026-100570/https://agentprime.io/advisories/CVE-2026-100570/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:59 GMTCVECVE-2026-100569: OpenClaw before 2026.8.1 Credential Exposure via Endpoint Overridehttps://agentprime.io/advisories/CVE-2026-100569/https://agentprime.io/advisories/CVE-2026-100569/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:58 GMTCVECVE-2026-100568: OpenClaw before 2026.8.1 Unauthorized Command Job Accesshttps://agentprime.io/advisories/CVE-2026-100568/https://agentprime.io/advisories/CVE-2026-100568/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:58 GMTCVECVE-2026-100567: OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostnamehttps://agentprime.io/advisories/CVE-2026-100567/https://agentprime.io/advisories/CVE-2026-100567/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:57 GMTCVECVE-2026-100564: OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Exporthttps://agentprime.io/advisories/CVE-2026-100564/https://agentprime.io/advisories/CVE-2026-100564/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:56 GMTCVECVE-2026-100563: OpenClaw before 2026.8.1 CSV Formula Injection via Session Labelshttps://agentprime.io/advisories/CVE-2026-100563/https://agentprime.io/advisories/CVE-2026-100563/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:55 GMTCVECVE-2026-100562: OpenClaw before 2026.8.1 Authorization Bypass via sessions.createhttps://agentprime.io/advisories/CVE-2026-100562/https://agentprime.io/advisories/CVE-2026-100562/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:54 GMTCVECVE-2026-100561: OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapperhttps://agentprime.io/advisories/CVE-2026-100561/https://agentprime.io/advisories/CVE-2026-100561/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:53 GMTCVECVE-2026-100560: OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypasshttps://agentprime.io/advisories/CVE-2026-100560/https://agentprime.io/advisories/CVE-2026-100560/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:53 GMTCVECVE-2026-100559: OpenClaw before 2026.8.1 Command Injection via Escaped Newlineshttps://agentprime.io/advisories/CVE-2026-100559/https://agentprime.io/advisories/CVE-2026-100559/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:52 GMTCVECVE-2026-100558: OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgradehttps://agentprime.io/advisories/CVE-2026-100558/https://agentprime.io/advisories/CVE-2026-100558/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:51 GMTCVECVE-2026-100557: OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatchhttps://agentprime.io/advisories/CVE-2026-100557/https://agentprime.io/advisories/CVE-2026-100557/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:51 GMTCVECVE-2026-100556: OpenClaw before 2026.8.1 Authentication Bypass via Session Resethttps://agentprime.io/advisories/CVE-2026-100556/https://agentprime.io/advisories/CVE-2026-100556/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:50 GMTCVECVE-2026-100555: OpenClaw before 2026.8.1 DNS Rebinding via attachment deliveryhttps://agentprime.io/advisories/CVE-2026-100555/https://agentprime.io/advisories/CVE-2026-100555/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:49 GMTCVECVE-2026-100554: OpenClaw before 2026.8.1 Canvas Capability Revocation Bypasshttps://agentprime.io/advisories/CVE-2026-100554/https://agentprime.io/advisories/CVE-2026-100554/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:49 GMTCVECVE-2026-100553: OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpinhttps://agentprime.io/advisories/CVE-2026-100553/https://agentprime.io/advisories/CVE-2026-100553/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:48 GMTCVECVE-2026-100552: OpenClaw before 2026.8.1 Policy Bypass via Native Toolshttps://agentprime.io/advisories/CVE-2026-100552/https://agentprime.io/advisories/CVE-2026-100552/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:47 GMTCVECVE-2026-100551: OpenClaw iOS Control UI TLS Pin Enforcement Bypasshttps://agentprime.io/advisories/CVE-2026-100551/https://agentprime.io/advisories/CVE-2026-100551/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:46 GMTCVEcriticalCVE-2026-100550: OpenClaw before 2026.8.1 Authentication Bypass via Access Grouphttps://agentprime.io/advisories/CVE-2026-100550/https://agentprime.io/advisories/CVE-2026-100550/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:45 GMTCVECVE-2026-100549: OpenClaw before 2026.8.1 Path Traversal via QQBot voice filenameshttps://agentprime.io/advisories/CVE-2026-100549/https://agentprime.io/advisories/CVE-2026-100549/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:45 GMTCVECVE-2026-100548: OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallbackhttps://agentprime.io/advisories/CVE-2026-100548/https://agentprime.io/advisories/CVE-2026-100548/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:43 GMTCVECVE-2026-100547: OpenClaw before 2026.8.1 Authentication Bypass via File URLhttps://agentprime.io/advisories/CVE-2026-100547/https://agentprime.io/advisories/CVE-2026-100547/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 02:18:43 GMTCVE