Security advisories

medium2026-04-09

CVE-2026-42421-OpenClaw: Existing WS sessions survive shared gateway token rotation

openclaw/openclaw · GHSA-5h3f-885m-v22w

low2026-04-09

CVE-2026-41913-OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths

openclaw/openclaw · GHSA-25wv-8phj-8p7r

high2026-04-09

CVE-2026-42432-OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement

openclaw/openclaw · GHSA-5wj5-87vq-39xm

medium2026-04-09

CVE-2026-41910-OpenClaw: /allowlist omits owner-only enforcement for cross-channel allowlist writes

openclaw/openclaw · GHSA-vc32-h5mq-453v

medium2026-04-09

CVE-2026-41916-OpenClaw: resolvedAuth closure becomes stale after config reload

openclaw/openclaw · GHSA-68x5-xx89-w9mm

medium2026-04-09

CVE-2026-42431-OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard

openclaw/openclaw · GHSA-cmfr-9m2r-xwhq

medium2026-04-09

CVE-2026-42422-OpenClaw `device.token.rotate` mints tokens for unapproved roles, bypassing device role-upgrade pairing

openclaw/openclaw · GHSA-whf9-3hcx-gq54

medium2026-04-09

CVE-2026-42424-OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration

openclaw/openclaw · GHSA-qqq7-4hxc-x63c

medium2026-04-09

CVE-2026-42423-OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts

openclaw/openclaw · GHSA-q2gc-xjqw-qp89

high2026-04-09

CVE-2026-39414-MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing

minio/minio · GHSA-h749-fxx7-pwpg

medium2026-04-09

CVE-2025-62718-Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

axios/axios · GHSA-3p68-rc4w-qgx5

medium2026-04-09

CVE-2026-35041-fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification

nearform/fast-jwt · GHSA-cjw9-ghj4-fwxf

medium2026-04-09

CVE-2026-35040-fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

nearform/fast-jwt · GHSA-3j8v-cgw4-2g6q

high2026-04-09

CVE-2026-4660-HashiCorp's go-getter library may allow arbitrary file reads

hashicorp/go-getter · GHSA-92mm-2pjq-r785

high2026-04-09

CVE-2026-42427-OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)

openclaw/openclaw · GHSA-7437-7hg8-frrw

high2026-04-09

OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel

openclaw/openclaw · GHSA-jf56-mccx-5f3f

high2026-04-09

OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade

openclaw/openclaw · GHSA-gfmx-pph7-g46x

low2026-04-09

CVE-2026-21388-Mattermost MS Teams plugin doesn't limit the request body size on the /lifecycle webhook endpoint

mattermost/mattermost-plugin-msteams · GHSA-x274-8qfc-hrgf

critical2026-04-09

CVE-2025-57735-Apache Airflow: JWT token still valid after logout

apache/airflow · GHSA-c92r-g8j5-vhcx

medium2026-04-09

CVE-2026-24661-Mattermost MS Teams plugin doesn't limit the request body size on the /changes webhook endpoint

mattermost/mattermost-plugin-msteams · GHSA-5rfv-h47g-xj42