← All credits
qclawer
46 vulnerability records and advisories credit this contributor.
CVE-2026-53837
OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers
CVE-2026-53835
OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings
CVE-2026-41362
OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication
CVE-2026-41367
OpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions
CVE-2026-42436
OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes
CVE-2026-42434
OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing