Security advisories

medium2026-03-04

CVE-2026-3240-Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability

concretecms/concretecms · GHSA-45fj-fvmm-xcc5

medium2026-03-03

CVE-2026-32018-OpenClaw's serialize sandbox registry writes to prevent races and delete-rollback corruption

openclaw/openclaw · GHSA-gq83-8q7q-9hfx

medium2026-03-03

CVE-2026-32001-OpenClaw's Node role device-identity bypass allows unauthorized node.event injection

openclaw/openclaw · GHSA-rv2q-f2h5-6xmg

high2026-03-03

OpenClaw's commands.allowFrom sender authorization accepted conversation identifiers via ctx.From

openclaw/openclaw · GHSA-2ch6-x3g4-7759

medium2026-03-03

CVE-2026-31995-OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path

openclaw/openclaw · GHSA-fg3m-vhrr-8gj6

medium2026-03-03

OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch

openclaw/openclaw · GHSA-534w-2vm4-89xr

medium2026-03-03

OpenClaw has Canvas route hardening for mixed-trust deployments

openclaw/openclaw · GHSA-cjv3-m589-v3rx

high2026-03-03

CVE-2026-27566-OpenClaw's exec allowlist wrapper analysis did not unwrap env/shell dispatch chains

openclaw/openclaw · GHSA-jj82-76v6-933r

medium2026-03-03

CVE-2026-32039-OpenClaw's typed sender-key matching for toolsBySender prevents identity-collision policy bypass

openclaw/openclaw · GHSA-wpph-cjgr-7c39

medium2026-03-03

CVE-2026-32050-OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

openclaw/openclaw · GHSA-792q-qw95-f446

high2026-03-03

CVE-2026-27523-OpenClaw's sandbox bind validation could bypass allowed-root and blocked-path checks via symlink-parent missing-leaf paths

openclaw/openclaw · GHSA-m8v2-6wwh-r4gc

high2026-03-03

OpenClaw: Zip extraction symlink traversal could write outside destination

openclaw/openclaw · GHSA-jxrq-8fm4-9p58

medium2026-03-03

CVE-2026-28449-OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing

openclaw/openclaw · GHSA-r9q5-c7qc-p26w

low2026-03-03

OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode

openclaw/openclaw · GHSA-8mf7-vv8w-hjr2

medium2026-03-03

CVE-2026-31998-OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch

openclaw/openclaw · GHSA-gw85-xp4q-5gp9

low2026-03-03

CVE-2026-32897-OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback

openclaw/openclaw · GHSA-v6x2-2qvm-6gv8

high2026-03-03

OpenClaw hook transform path containment missed symlink-resolved escapes

openclaw/openclaw · GHSA-659f-22xc-98f2

medium2026-03-03

CVE-2026-32010-In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program

openclaw/openclaw · GHSA-4gc7-qcvf-38wg

medium2026-03-03

CVE-2026-32006-OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallback

openclaw/openclaw · GHSA-25pw-4h6w-qwvm

low2026-03-03

OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity

openclaw/openclaw · GHSA-gcj7-r3hg-m7w6