← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-32057
OpenClaw < 2026.2.25 - Authentication Bypass via Control UI client.id Parameter
CVE-2026-32056
OpenClaw < 2026.2.22 - Remote Code Execution via Shell Startup Environment Variable Injection in system.run
CVE-2026-32055
OpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink
CVE-2026-32054
OpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling
CVE-2026-32052
OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers
CVE-2026-32051
OpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access
CVE-2026-32050
OpenClaw < 2026.2.25 - Unauthorized Reaction Status Event Enqueue via Access Check Bypass
CVE-2026-32049
OpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass
CVE-2026-32048
OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
CVE-2026-32043
OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter