← All credits
KeenSecurityLab
91 vulnerability records and advisories credit this contributor.
CVE-2026-42429
OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication
CVE-2026-41362
OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication
CVE-2026-41300
OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding
CVE-2026-41367
OpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions
CVE-2026-44999
OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events
CVE-2026-44993
OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions
CVE-2026-44996
OpenClaw < 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embedding
CVE-2026-45002
OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping
CVE-2026-44998
OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools
CVE-2026-44994
OpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpoint