← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-41355
OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion
CVE-2026-43577
OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes
CVE-2026-41387
OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization
CVE-2026-41386
OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes
CVE-2026-41373
OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy
CVE-2026-41369
OpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution
CVE-2026-41366
OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting
CVE-2026-41350
OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations
CVE-2026-41302
OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download
CVE-2026-41303
OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands