Mittel
CVE-2026-33575
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 601
Filter zurücksetzen
Mittel
CVE-2026-32975
OpenClaw's Zalouser allowlist authorization matched mutable group names by default
Mittel
CVE-2026-32923
OpenClaw: Discord guild reaction ingress could bypass users and roles allowlists
Niedrig
CVE-2026-32970
OpenClaw: Unavailable local auth SecretRefs could fall through to remote credentials in local mode
Hoch
CVE-2026-32988
OpenClaw: Sandbox staged writes could escape the verified parent directory before commit
Mittel
CVE-2026-32919
OpenClaw: Write-scoped callers could reach admin-only session reset logic through `agent`
Hoch
CVE-2026-32978
OpenClaw: Unrecognized script runners could bypass `system.run` approval integrity
Mittel
CVE-2026-32976
OpenClaw: Channel commands could bypass account-scoped `configWrites` restrictions
Hoch
CVE-2026-32971
OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv
Hoch
CVE-2026-32979
OpenClaw: Unbound interpreter and runtime commands could bypass node-host approval integrity
Hoch
CVE-2026-32915
OpenClaw: Leaf subagents could steer sibling sessions across sandbox boundaries
Kritisch
CVE-2026-32922
OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE
Kritisch
CVE-2026-32916
OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes
Mittel
CVE-2026-32977
OpenClaw: Sandbox `writeFile` commit could race outside the validated path
Hoch
CVE-2026-32302
OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode
Mittel
CVE-2026-32031
OpenClaw: /api/channels gateway-auth boundary bypass via path canonicalization mismatch
Mittel
CVE-2026-32895
OpenClaw: Slack system events bypass sender authorization in member and message subtype handlers
Hoch
ghsa-qcc4-p59m-p54m
OpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary
Hoch
CVE-2026-32055
OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf
Hoch
ghsa-gp3q-wpq4-5c5h
OpenClaw: LINE group allowlist scope mismatch with DM pairing-store entries
Mittel
CVE-2026-34506
OpenClaw's MS Teams sender allowlist bypass when route allowlist is configured and sender allowlist is empty
Mittel
CVE-2026-33574
OpenClaw's skills-install-download can be redirected outside the tools root by rebinding the validated base path
Mittel
CVE-2026-32921
OpenClaw's system.run approvals did not bind mutable script operands across approval and execution
Mittel
CVE-2026-27646
OpenClaw: Sandboxed /acp spawn requests could initialize host ACP sessions
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.