Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100607 | high | 7.7 | No | Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifier bindings, allowin... | 2026-09-28 |
| CVE-2026-100595 | medium | 6.5 | No | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner chan... | 2026-09-28 |
| CVE-2026-100591 | medium | 6.3 | No | OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks... | 2026-09-28 |
| CVE-2026-100587 | high | 8.8 | No | OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner ch... | 2026-09-28 |
| CVE-2026-100579 | high | 7.6 | No | OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message.action. In identity-bearing Gateway dep... | 2026-09-28 |
| CVE-2026-100571 | medium | 5.3 | No | OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signatu... | 2026-09-28 |
| CVE-2026-100567 | high | 8.2 | No | OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 and < 2026.8.1, the Gateway validated a sing... | 2026-09-28 |
| CVE-2026-100562 | medium | 5.4 | No | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that allows operator.write c... | 2026-09-28 |
| CVE-2026-100558 | high | 7.5 | No | OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to... | 2026-09-28 |
| CVE-2026-100554 | medium | 4.2 | No | OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired... | 2026-09-28 |
| CVE-2026-100550 | medium | 5.4 | No | OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is... | 2026-09-28 |
| CVE-2026-100546 | medium | 6.4 | No | OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path... | 2026-09-28 |
| CVE-2026-100542 | low | 3.1 | No | OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded co... | 2026-09-28 |
| CVE-2026-100538 | medium | 6.5 | No | OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when hand... | 2026-09-28 |
| CVE-2026-100534 | low | 3.1 | No | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to ca... | 2026-09-28 |
| CVE-2026-100530 | high | 7.3 | No | OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute i... | 2026-09-28 |
| CVE-2026-100522 | medium | 6.1 | No | Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php where the lng parameter is not properly escaped... | 2026-09-28 |
| CVE-2026-62744 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 2026-09-28 |
| CVE-2026-97335 | high | 7.7 | No | Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 an... | 2026-09-28 |
| CVE-2026-96273 | medium | 5.5 | No | Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException... | 2026-09-28 |