← All credits
Nathan (@nexrin)
19 vulnerability records and advisories credit this contributor.
CVE-2026-41391
OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling
CVE-2026-41393
OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area Discovery
CVE-2026-41380
OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables
CVE-2026-41398
OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridge
CVE-2026-41341
OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord Extension
CVE-2026-41343
OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency
CVE-2026-41336
OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override
CVE-2026-41342
OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding
CVE-2026-41348
OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands