openclaw/crabbox Security Advisories | GitStock

critical2026-05-14

Crabbox: environment variable exposure vulnerability

GHSA-fm77-94qm-4894 · CVE-2026-8634

high2026-05-14

Crabbox: authentication bypass vulnerability that allows impersonation of others by spoofing identity headers

GHSA-4g9m-rffv-h6wq · CVE-2026-8621

medium2026-05-11

Crabbox contains a path traversal vulnerability in the Islo provider's workspace path resolution

GHSA-3cjv-h753-qf7h · CVE-2026-45224