← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32988
OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation
CVE-2026-32987
OpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device Pairing
CVE-2026-32979
OpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval
CVE-2026-32978
OpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners
CVE-2026-32976
OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands
CVE-2026-32972
OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request
CVE-2026-32971
OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands
CVE-2026-32970
OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs
CVE-2026-32922
OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate
CVE-2026-32921
OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run