← All credits
Edward-x (@YLChen-007)
19 vulnerability records and advisories credit this contributor.
CVE-2026-53841
OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML
CVE-2026-53860
OpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles
CVE-2026-53851
OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass
CVE-2026-53840
OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects
CVE-2026-53862
OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening
CVE-2026-53838
OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection
CVE-2026-53836
OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases
CVE-2026-41384
OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend
CVE-2026-41349
OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch