Security advisories

high2026-02-18

CVE-2025-33253-NVIDIA NeMo Framework Deserializes Untrusted Data

nvidia-nemo/nemo · GHSA-hvjw-vp7g-39h5

high2026-02-18

CVE-2025-33245-NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution

nvidia-nemo/nemo · GHSA-9379-mwvr-7wxx

high2026-02-18

CVE-2026-26205-opa-envoy-plugin has an Authorization Bypass via Double-Slash Path Misinterpretation in input.parsed_path

open-policy-agent/opa-envoy-plugin · GHSA-9f29-v6mm-pw6w

medium2026-02-18

CVE-2026-26189-Trivy Action has a script injection via sourced env file in composite action

aquasecurity/trivy-action · GHSA-9p44-j4g5-cfx5

high2026-02-18

CVE-2026-28456-OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway

openclaw/openclaw · GHSA-v6c6-vqqg-w888

high2026-02-18

CVE-2026-28482-OpenClaw's unsanitized session ID enables path traversal in transcript file operations

openclaw/openclaw · GHSA-5xfq-5mr7-426q

high2026-02-18

CVE-2026-26960-Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction

isaacs/node-tar · GHSA-83g3-92jg-28cx

high2026-02-18

OpenClaw inter-session prompts could be treated as direct user instructions

openclaw/openclaw · GHSA-w5c7-9qqw-6645

high2026-02-18

CVE-2026-29610-OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides)

openclaw/openclaw · GHSA-jqpq-mgvm-f9r6

medium2026-02-18

CVE-2026-28476-OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication

openclaw/openclaw · GHSA-pg2v-8xwh-qhcc

medium2026-02-18

CVE-2026-29606-OpenClaw Twilio voice-call webhook auth bypass when ngrok loopback compatibility is enabled

openclaw/openclaw · GHSA-c37p-4qqg-3p76

medium2026-02-18

CVE-2026-28480-OpenClaw Telegram allowlist authorization accepted mutable usernames

openclaw/openclaw · GHSA-mj5r-hh7j-4gxf

high2026-02-18

CVE-2026-28469-OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting

openclaw/openclaw · GHSA-rq6g-px6m-c248

high2026-02-18

CVE-2026-26317-OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints

openclaw/openclaw · GHSA-3fqr-4cg8-h96q

high2026-02-18

CVE-2026-28478-OpenClaw affected by denial of service via unbounded webhook request body buffering

openclaw/openclaw · GHSA-q447-rj3r-2cgh

medium2026-02-18

CVE-2026-28452-OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)

openclaw/openclaw · GHSA-h89v-j3x9-8wqj

medium2026-02-18

CVE-2026-29612-OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks

openclaw/openclaw · GHSA-w2cg-vxx6-5xjg

high2026-02-18

CVE-2026-29609-OpenClaw affected by denial of service via unbounded URL-backed media fetch

openclaw/openclaw · GHSA-j27p-hq53-9wgc

high2026-02-18

CVE-2026-28392-OpenClaw Slack: dmPolicy=open allowed any DM sender to run privileged slash commands

openclaw/openclaw · GHSA-v773-r54f-q32w

high2026-02-18

CVE-2026-28463-OpenClaw exec approvals: safeBins could bypass stdin-only constraints via shell expansion

openclaw/openclaw · GHSA-xvhf-x56f-2hpp