← All credits
KeenSecurityLab
91 vulnerability records and advisories credit this contributor.
CVE-2026-53845
OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping
CVE-2026-53863
OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy
CVE-2026-53847
OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope
CVE-2026-53844
OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search
CVE-2026-53850
OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command
CVE-2026-53834
OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands
CVE-2026-53828
OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement
CVE-2026-53837
OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers
CVE-2026-53835
OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings
CVE-2026-42432
OpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypass