Security advisories

medium2026-04-17

CVE-2026-43574-OpenClaw: Empty approver lists could grant explicit approval authorization

openclaw/openclaw · GHSA-49cg-279w-m73x

medium2026-04-17

CVE-2026-43534-OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input

openclaw/openclaw · GHSA-7g8c-cfr3-vqqr

high2026-04-17

CVE-2026-43584-OpenClaw: Exec environment denylist missed high-risk interpreter startup variables

openclaw/openclaw · GHSA-vfp4-8x56-j7c5

medium2026-04-17

CVE-2026-42435-OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms

openclaw/openclaw · GHSA-j6c7-3h5x-99g9

medium2026-04-17

CVE-2026-43568-OpenClaw: Memory dreaming config persistence was reachable from operator.write commands

openclaw/openclaw · GHSA-5gjc-grvm-m88j

low2026-04-17

CVE-2026-43572-OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks

openclaw/openclaw · GHSA-gc9r-867r-j85f

low2026-04-17

CVE-2026-43583-OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay

openclaw/openclaw · GHSA-r77c-2cmr-7p47

medium2026-04-17

OpenClaw: Heartbeat owner downgrade missed local async exec completion events

openclaw/openclaw · GHSA-g375-h3v6-4873

high2026-04-17

CVE-2026-42437-OpenClaw: Voice-call realtime WebSocket accepted oversized frames

openclaw/openclaw · GHSA-vw3h-q6xq-jjm5

medium2026-04-17

CVE-2026-43566-OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events

openclaw/openclaw · GHSA-g2hm-779g-vm32

medium2026-04-17

CVE-2026-42436-OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation

openclaw/openclaw · GHSA-c4qm-58hj-j6pj

high2026-04-17

CVE-2026-43528-OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases

openclaw/openclaw · GHSA-8372-7vhw-cm6q

medium2026-04-17

CVE-2026-43535-OpenClaw: Collect-mode queue batches could reuse the last sender authorization context

openclaw/openclaw · GHSA-jwrq-8g5x-5fhm

high2026-04-17

CVE-2026-41279-Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

flowiseai/flowise · GHSA-5fw2-mwhh-9947

high2026-04-17

CVE-2026-41278-Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

flowiseai/flowise · GHSA-w47f-j8rh-wx87

high2026-04-17

CVE-2026-41277-Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

flowiseai/flowise · GHSA-3prp-9gf7-4rxx

high2026-04-17

CVE-2026-40931-Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing

node-modules/compressing · GHSA-4c3q-x735-j3r5

critical2026-04-17

CVE-2026-40525-OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes

volcengine/openviking · GHSA-jgq2-vq69-gr6h

low2026-04-17

CVE-2026-35402-Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

neo4j-contrib/mcp-neo4j · GHSA-x3cv-r3g3-fpg9

critical2026-04-17

CVE-2026-27197-Sentry: Improper authentication on SAML SSO process allows user identity linking

getsentry/sentry · GHSA-ggmg-cqg6-j45g