Security advisories

high2026-03-02

OpenClaw: Sandbox media TOCTOU could read files outside sandbox root

openclaw/openclaw · GHSA-7xmq-g46g-f8pv

high2026-03-02

OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries

openclaw/openclaw · GHSA-x82f-27x3-q89c

critical2026-03-02

CVE-2026-31999-CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths

openclaw/openclaw · GHSA-6f6j-wx9w-ff4j

medium2026-03-02

OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization

openclaw/openclaw · GHSA-8m9v-xpgf-g99m

medium2026-03-02

CVE-2026-32048-OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns

openclaw/openclaw · GHSA-p7gr-f84w-hqg5

medium2026-03-02

CVE-2026-32066-OpenClaw has unbounded memory growth in Zalo webhook via query-string key churn (unauthenticated DoS)

openclaw/openclaw · GHSA-wr6m-jg37-68xh

medium2026-03-02

OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists

openclaw/openclaw · GHSA-392f-ggf5-fp3c

high2026-03-02

CVE-2026-32041-OpenClaw: Browser control startup could continue unauthenticated after auth bootstrap failure

openclaw/openclaw · GHSA-vpj2-69hf-rppw

high2026-03-02

CVE-2026-28795-OpenChatBI has a Path Traversal Vulnerability in save_report Tool

zhongyu09/openchatbi · GHSA-vmwq-8g8c-jm79

critical2026-03-02

CVE-2026-28794-`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization

middleapi/orpc · GHSA-m272-9rp6-32mc

high2026-03-02

CVE-2026-28790-OliveTin has Unauthenticated Action Termination via KillAction When Guests Must Login

olivetin/olivetin · GHSA-4fqm-6fmh-82mq

high2026-03-02

CVE-2026-28789-OliveTin has unauthenticated DoS via concurrent map writes in OAuth2 state handling

olivetin/olivetin · GHSA-45m3-398w-m2m9

critical2026-03-02

CVE-2026-27971-Qwik vulnerable to Unauthenticated RCE via server$ Deserialization

qwikdev/qwik · GHSA-p9x5-jp3h-96mm

high2026-03-02

CVE-2026-28787-OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay

oneuptime/oneuptime · GHSA-gjjc-pcwp-c74m

medium2026-03-02

CVE-2026-2256-MS-Agent vulnerable to Command Injection

modelscope/ms-agent · GHSA-4gc2-344q-r2rw

high2026-03-02

CVE-2026-28507-Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal

idno/idno · GHSA-37j7-56xc-c468

critical2026-03-02

CVE-2026-28508-Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint

idno/idno · GHSA-fcrh-fqxh-6fx6

critical2026-03-02

CVE-2026-28502-AVideo has Authenticated Remote Code Execution via Unsafe Plugin ZIP Extraction

wwbn/avideo · GHSA-v8jw-8w5p-23g3

critical2026-03-02

CVE-2026-28501-AVideo has Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

wwbn/avideo · GHSA-pv87-r9qf-x56p

high2026-03-02

CVE-2026-28438-CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

cocoindex-io/cocoindex · GHSA-59g6-v3vg-f7wc