https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:43:49 +0000 https://db.gcve.eu/vuln/cve-2026-32920 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can execute malicious code by including crafted workspace plugins in cloned repositories that execute when users run OpenClaw from the directory.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can execute malicious code by including crafted workspace plugins in cloned repositories that execute when users run OpenClaw from the directory.</p> https://db.gcve.eu/vuln/cve-2026-32920 https://db.gcve.eu/vuln/ghsa-99qw-6mr3-36qr <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>OpenClaw automatically discovered and loaded plugins from `.openclaw/extensions/` inside the current workspace without an explicit trust or install step. A malicious repository could include a crafted workspace plugin that executed as soon as a user ran OpenClaw from that cloned directory.</p> <p>### Impact</p> <p>Opening or running OpenClaw in an untrusted repository could lead to arbitrary code execution under the user&#39;s account.</p> <p>### Affected versions</p> <p>`openclaw` `&lt;= 2026.3.11`</p> <p>### Patch</p> <p>Fixed in `openclaw` `2026.3.12`. Workspace plugin loading now requires explicit trusted state before execution. Users should update to `2026.3.12` or later and avoid running OpenClaw inside untrusted repositories on older releases.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>OpenClaw automatically discovered and loaded plugins from `.openclaw/extensions/` inside the current workspace without an explicit trust or install step. A malicious repository could include a crafted workspace plugin that executed as soon as a user ran OpenClaw from that cloned directory.</p> <p>### Impact</p> <p>Opening or running OpenClaw in an untrusted repository could lead to arbitrary code execution under the user&#39;s account.</p> <p>### Affected versions</p> <p>`openclaw` `&lt;= 2026.3.11`</p> <p>### Patch</p> <p>Fixed in `openclaw` `2026.3.12`. Workspace plugin loading now requires explicit trusted state before execution. Users should update to `2026.3.12` or later and avoid running OpenClaw inside untrusted repositories on older releases.</p> https://db.gcve.eu/vuln/ghsa-99qw-6mr3-36qr