Media
CVE-2026-41300
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 601
Restablecer filtros
Media
CVE-2026-41403
OpenClaw: diffs viewer misclassifies proxied remote requests as loopback when `allowRemoteViewer` is disabled
Baja
CVE-2026-41348
OpenClaw: Discord Slash Commands Bypass Group DM Channel Allowlist
Alta
CVE-2026-41393
OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration
Media
CVE-2026-41340
OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts
Baja
CVE-2026-41388
OpenClaw: Tlon Startup Migration Rehydrates Empty-Array Revocations From File Config
Alta
CVE-2026-41386
OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing
Alta
CVE-2026-41353
OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection
Media
CVE-2026-41381
OpenClaw: Discord voice manager bypasses channel-level member access allowlist
Media
CVE-2026-41331
OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders
Alta
CVE-2026-41378
OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch
Crítica
CVE-2026-41296
OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile
Media
CVE-2026-41400
OpenClaw: Voice-call still parses large WebSocket frames before start validation (Incomplete fix for CVE-2026-32062)
Baja
CVE-2026-41356
OpenClaw: Gateway `device.token.rotate` does not terminate active WebSocket sessions after credential rotation
Media
CVE-2026-41333
OpenClaw: Fake DeviceToken Bypasses Shared Auth Rate Limiting
Alta
CVE-2026-41369
OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables
Media
CVE-2026-41370
OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read
Alta
CVE-2026-41404
OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode
Alta
CVE-2026-41349
OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`
Media
CVE-2026-41335
OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability
Media
CVE-2026-41338
OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses
Media
CVE-2026-41334
OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS
Alta
CVE-2026-41373
OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides
Alta
CVE-2026-41352
OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.