---METADATA---
VENDOR: krayin
PRODUCT: laravel-crm
AFFECTED_VERSIONS: 0 through 2.2.0, 2.2.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A missing authentication vulnerability in the Krayin CRM installer middleware allows unauthenticated remote attackers to overwrite the administrator account and gain full CRM access.

Executive Summary:
A critical authentication bypass in Krayin CRM allows unauthenticated attackers to perform an account takeover of the primary administrator profile.

Vulnerability Details

CVE-ID: CVE-2026-41452

Affected Software: krayin laravel-crm

Affected Versions: 0 through 2.2.0, 2.2.4

Vulnerability: The vulnerability exists in the installer middleware, where a flaw in the CanInstall redirect check allows attackers to bypass authentication. By sending a crafted HTTP POST request with a specific header, an attacker can access the admin-config-setup endpoint to overwrite the primary administrator credentials.

Business Impact

Successful exploitation grants an attacker full administrative access to the CRM platform. This results in the potential loss of sensitive customer data, unauthorized configuration changes, and complete compromise of business information stored within the application. Given the CVSS score of 9.8, this vulnerability is critical as it completely invalidates the security model of the CRM.

Remediation Plan

Immediate Action: Update krayin laravel-crm to a patched version (specifically those outside the range of 2.2.0 through 2.2.4, such as 2.2.1 through 2.2.3 if applicable per vendor guidance).

Proactive Monitoring: Audit user account logs for unexpected changes to the administrator account and monitor for unauthorized access to the admin-config-setup endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block requests containing the X-Requested-With: XMLHttpRequest header directed at the installer endpoints.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists via security research write-ups.

Analyst Notes: As of August 3, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly severe because it allows for immediate, unauthenticated account takeover.

Analyst Recommendation

This is a critical security vulnerability that directly threatens the integrity and confidentiality of the CRM database. Administrators should verify their current version and apply the vendor-recommended patches immediately to prevent unauthorized administrative account creation and potential data breaches.

---METADATA---
VENDOR: tclahr
PRODUCT: uac
AFFECTED_VERSIONS: 0 up to (excluding) 3.3.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the parse_artifact.sh script of UAC (Unix-like Artifacts Collector) allows for OS command injection via improper handling of user-supplied input.

Executive Summary:
A critical OS command injection vulnerability in tclahr UAC allows local attackers to execute arbitrary commands, threatening system integrity and data security.

Vulnerability Details

CVE-ID: CVE-2026-41451

Affected Software: tclahr uac

Affected Versions: 0 up to (excluding) 3.3.0

Vulnerability: This is an OS Command Injection (CWE-78) vulnerability within the parse_artifact.sh script, specifically regarding user substitution handling. The vulnerability allows an unauthenticated local attacker to execute arbitrary commands on the underlying operating system.

Business Impact

With a CVSS score of 7.8, this vulnerability represents a significant threat to organizational security. Successful exploitation could allow an attacker to bypass security controls, access sensitive artifact data, or gain persistent control over the host system, leading to severe reputational and operational damage.

Remediation Plan

Immediate Action: Patch the affected systems by updating tclahr uac to version 3.3.0 or later.

Proactive Monitoring: Monitor for anomalous script execution or unexpected output from the UAC parsing functions.

Compensating Controls: Implement file integrity monitoring and ensure that the UAC tool is run with the minimum necessary privileges to perform its collection tasks.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The nature of command injection flaws makes this a high-risk item that should be addressed immediately through vendor-provided updates.

Analyst Recommendation

Immediate patching is required to address this vulnerability. Ensure all instances of the UAC tool are updated to version 3.3.0 to protect against potential exploitation of the parse_artifact.sh script.

---METADATA---
VENDOR: tclahr
PRODUCT: uac
AFFECTED_VERSIONS: 0 up to (excluding) 3.3.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
UAC (Unix-like Artifacts Collector) contains an OS command injection vulnerability in command_collector.sh, which may allow an attacker to execute arbitrary commands on the host system.

Executive Summary:
An OS command injection flaw in tclahr UAC exposes systems to unauthorized code execution and potential full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-41450

Affected Software: tclahr uac

Affected Versions: 0 up to (excluding) 3.3.0

Vulnerability: This is an OS Command Injection (CWE-78) vulnerability located in the command_collector.sh script. The vulnerability allows an unauthenticated local attacker to execute arbitrary commands, provided they can influence the input processed by the script, subject to the user interaction constraint.

Business Impact

The vulnerability carries a CVSS score of 7.8, reflecting the high potential for total system compromise if exploited. Unauthorized code execution can lead to the exfiltration of sensitive artifacts collected by the tool, modification of system configurations, or complete loss of control over the affected host.

Remediation Plan

Immediate Action: Upgrade to tclahr uac version 3.3.0 or higher to incorporate the vendor-supplied fix.

Proactive Monitoring: Review audit logs for unusual shell commands or unexpected child processes originating from the UAC utility.

Compensating Controls: Apply principle of least privilege by ensuring the UAC tool is executed only by users who absolutely require it and in controlled, isolated environments.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires local access and user interaction, the technical impact of a successful command injection remains critical.

Analyst Recommendation

Organizations should treat this vulnerability with high priority. Updating to version 3.3.0 is the only reliable way to prevent potential exploitation of the command_collector.sh script.

---METADATA---
VENDOR: Lenovo
PRODUCT: Software Fix
AFFECTED_VERSIONS: 0 up to (excluding) 7.5.5.19
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://support.lenovo.com/us/en/product_security/LEN-213829","name":null,"tags":[]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:40.703Z
---END_METADATA---

Description Summary:
A local authenticated user can achieve arbitrary code execution with elevated privileges in Lenovo Software Fix due to improper neutralization of argument delimiters.

Executive Summary:
A vulnerability in Lenovo Software Fix allows a local authenticated user to escalate privileges and execute arbitrary code, posing a significant risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-4145

Affected Software: Lenovo Software Fix

Affected Versions: 0 up to (excluding) 7.5.5.19

Vulnerability: The flaw is an argument injection vulnerability (CWE-88) occurring within the application, which enables a local user who has already authenticated to the system to execute commands with higher privileges than intended.

Business Impact

Successful exploitation of this vulnerability permits a local attacker to gain elevated system privileges, which can lead to complete compromise of the affected machine. Given the CVSS score of 7.8, this high-severity flaw threatens data confidentiality and system availability, potentially allowing an attacker to install malware or pivot to other network resources.

Remediation Plan

Immediate Action: Update Lenovo Software Fix to version 7.5.5.19 or later as provided in the vendor security advisory.

Proactive Monitoring: Review local system logs and audit trails for unexpected process execution or unauthorized attempts to access administrative functions.

Compensating Controls: Implement strict principle of least privilege policies to ensure that standard user accounts lack unnecessary permissions that could be leveraged during an exploit attempt.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the flaw requires local access, the risk of privilege escalation makes patching a high priority for administrative environments.

Analyst Recommendation

This vulnerability presents a clear path for privilege escalation within the Lenovo Software Fix environment. Organizations should prioritize updating all instances of the affected software to version 7.5.5.19 or later to remediate the underlying command injection flaw and prevent potential unauthorized system-level operations.

---METADATA---
VENDOR: tclahr
PRODUCT: uac
AFFECTED_VERSIONS: 0 up to (excluding) 3.3.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
UAC (Unix-like Artifacts Collector) is vulnerable to OS command injection via the run_command.sh script, potentially allowing an attacker to execute arbitrary system commands.

Executive Summary:
A high-severity OS command injection vulnerability in tclahr UAC allows local attackers to execute arbitrary code with elevated privileges.

Vulnerability Details

CVE-ID: CVE-2026-41449

Affected Software: tclahr uac

Affected Versions: 0 up to (excluding) 3.3.0

Vulnerability: This vulnerability is an OS Command Injection (CWE-78) flaw triggered through the run_command.sh script. The attack vector is local, requiring no authentication, but relies on user interaction to trigger the malicious command execution.

Business Impact

Successful exploitation of this vulnerability results in full system compromise, as the attacker can execute arbitrary code with the same privileges as the UAC process. Given the CVSS score of 7.8, this poses a significant risk to data confidentiality, integrity, and system availability, particularly in environments where UAC is run with administrative or root privileges.

Remediation Plan

Immediate Action: Update the tclahr uac package to version 3.3.0 or later to include the necessary security patches.

Proactive Monitoring: Monitor system logs for suspicious process spawning or unexpected command execution patterns associated with the UAC tool.

Compensating Controls: Restrict execution permissions for the UAC tool to authorized users only and ensure that the tool is not executed in contexts where untrusted input can be passed to its scripts.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the potential for direct OS command execution, making timely remediation essential for secure system operations.

Analyst Recommendation

The severity of this command injection vulnerability necessitates prompt action. Administrators should prioritize updating to version 3.3.0 to neutralize the risk of unauthorized system-level code execution.

---METADATA---
VENDOR: Zucchetti S.p.a.
PRODUCT: FirmaCheck
AFFECTED_VERSIONS: 0 up to (excluding) 1.3.16
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
FirmaCheck for Windows is vulnerable to DLL hijacking due to an untrusted search path, which could allow local attackers to execute arbitrary code.

Executive Summary:
An untrusted search path vulnerability in Zucchetti FirmaCheck allows local attackers to perform DLL hijacking and gain unauthorized code execution.

Vulnerability Details

CVE-ID: CVE-2026-41447

Affected Software: Zucchetti S.p.a. FirmaCheck

Affected Versions: 0 up to (excluding) 1.3.16

Vulnerability: This vulnerability is a classic untrusted search path issue (CWE-426) where the application improperly validates the path used to load libraries. An authenticated local attacker can leverage this flaw to execute arbitrary code with the privileges of the application.

Business Impact

Exploitation of this vulnerability allows a local user to escalate privileges or execute malicious code within the context of the FirmaCheck application. With a CVSS score of 7.8, this poses a significant risk to the integrity and security of local workstations, potentially facilitating further attacks on the internal network.

Remediation Plan

Immediate Action: Update FirmaCheck to version 1.3.16 or later to ensure proper validation of library search paths.

Proactive Monitoring: Review system logs for unauthorized file access or the loading of unsigned DLLs by the FirmaCheck process.

Compensating Controls: Restrict local user permissions to write to application directories and use Endpoint Detection and Response (EDR) tools to identify suspicious process execution patterns.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 4, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently exploitable by any local user with the ability to place a malicious DLL in the application's search path.

Analyst Recommendation

Organizations utilizing FirmaCheck on Windows workstations must prioritize this update to prevent local privilege escalation. Administrators should verify the installation of version 1.3.16 across all endpoints to mitigate this high-severity risk.

---METADATA---
VENDOR: mborgerding
PRODUCT: kissfft
AFFECTED_VERSIONS: 0 up to (excluding) 8a8e66e33d692bad1376fe7904d87d767730537f
CONFIDENCE: high
MISSING: none
CREDITS: Sajeeb Lohani (finder); VulnCheck (coordinator)
SOURCES_JSON: [{"url":"https://github.com/mborgerding/kissfft/commit/8a8e66e33d692bad1376fe7904d87d767730537f","name":null,"tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/kissfft-integer-overflow-heap-buffer-overflow-via-kiss-fftndr-alloc","name":null,"tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.627Z
---END_METADATA---

Description Summary:
An integer overflow in the kiss_fftndr_alloc function of KissFFT leads to a heap-based buffer overflow, potentially allowing for arbitrary memory corruption.

Executive Summary:
An integer overflow vulnerability in the KissFFT library allows unauthenticated attackers to trigger a heap buffer overflow, potentially leading to arbitrary code execution.

Vulnerability Details

CVE-ID: CVE-2026-41445

Affected Software: mborgerding kissfft

Affected Versions: 0 up to (excluding) 8a8e66e33d692bad1376fe7904d87d767730537f

Vulnerability: This vulnerability involves an integer overflow during the allocation size calculation in the kiss_fftndr_alloc function, which fails to account for 32-bit signed integer limits. An unauthenticated attacker can supply crafted dimensions that result in an undersized buffer allocation, subsequently triggering a heap buffer overflow when the application processes data.

Business Impact

The exploitation of this flaw can lead to severe system compromise, including potential remote code execution or application crashes, resulting in significant service downtime. Given the CVSS score of 8.8, this vulnerability is classified as High severity, reflecting its potential for total impact on confidentiality, integrity, and availability of the affected system.

Remediation Plan

Immediate Action: Update the KissFFT library to commit 8a8e66e33d692bad1376fe7904d87d767730537f or later to incorporate the integer overflow fix.

Proactive Monitoring: Monitor application logs for unexpected crashes or segmentation faults, which may indicate attempted exploitation of heap memory errors.

Compensating Controls: Implement input validation routines to reject abnormally large or negative dimension values before they reach the KissFFT processing functions.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its location in a low-level mathematical library, which is frequently integrated into larger, complex software stacks.

Analyst Recommendation

The vulnerability poses a high risk to any application utilizing the KissFFT library for multidimensional real fast Fourier transforms. Organizations should prioritize updating their dependencies to the patched version immediately to prevent potential heap-based memory corruption and subsequent compromise of host systems.

---METADATA---
VENDOR: OpenTelemetry
PRODUCT: eBPF Instrumentation
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
The OpenTelemetry eBPF Instrumentation tool is affected by a high-severity security vulnerability that could threaten the integrity of system-level observability.

Executive Summary:
A high-severity vulnerability in OpenTelemetry eBPF Instrumentation could allow for unauthorized system-level impacts due to its privileged nature.

Vulnerability Details

CVE-ID: CVE-2026-41433

Affected Software: OpenTelemetry eBPF Instrumentation

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability affects the eBPF instrumentation component, which runs at a high-privilege level within the kernel or system space. The CVSS score of 8.4 suggests a critical risk related to improper handling of eBPF programs or data, potentially leading to privilege escalation or kernel-level instability.

Business Impact

A CVSS score of 8.4 indicates a high risk to infrastructure security. Since eBPF tools operate with elevated privileges, exploitation could allow an attacker to bypass security controls, monitor kernel-level activities, or disrupt system observability, leading to significant operational risks.

Remediation Plan

Immediate Action: Update the OpenTelemetry eBPF Instrumentation agent to the latest version as recommended by the vendor.

Proactive Monitoring: Monitor system logs for unusual kernel activity or errors related to eBPF program loading and execution.

Compensating Controls: Restrict access to the observability platform and ensure only authorized personnel can deploy or modify eBPF instrumentation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should prioritize updating observability tools that utilize eBPF. Given the privileged nature of this software, vulnerabilities must be addressed immediately to prevent kernel-level compromises.

---METADATA---
VENDOR: New API
PRODUCT: New API
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
New API, an LLM gateway and AI asset management system, contains an unspecified vulnerability that may impact system security.

Executive Summary:
A security vulnerability in the New API LLM gateway and AI asset management system requires immediate attention to prevent potential exploitation.

Vulnerability Details

CVE-ID: CVE-2026-41432

Affected Software: New API

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects New API, a gateway for large language models and AI asset management. The specific nature of the flaw is currently being tracked and requires verification through vendor documentation.

Business Impact

With a CVSS score of 7.1, this vulnerability is rated as High. It indicates that the AI management system could be leveraged to gain unauthorized access or manipulate AI assets, potentially leading to data leakage or the corruption of AI-driven workflows.

Remediation Plan

Immediate Action: Apply vendor-provided security updates immediately upon release.

Proactive Monitoring: Monitor API logs for unusual access patterns, unexpected model requests, or configuration changes within the AI management dashboard.

Compensating Controls: Implement strict API key management and ensure that the New API gateway is protected by network-level access controls.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 10, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations deploying AI gateways must maintain rigorous update cycles. Consult the vendor's security advisory to confirm the specific impact and ensure all necessary patches are applied to safeguard your AI infrastructure.

---METADATA---
VENDOR: Zen Browser
PRODUCT: Zen Browser
AFFECTED_VERSIONS: < 1.19.9b
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Zen Browser contains a vulnerability in its release pipeline related to the improper verification of cryptographic signatures, which could allow for the execution of unauthorized or malicious code.

Executive Summary:
A vulnerability in the Zen Browser release pipeline allows for improper cryptographic signature verification, creating a risk of unauthorized code execution.

Vulnerability Details

CVE-ID: CVE-2026-41431

Affected Software: Zen Browser desktop

Affected Versions: < 1.19.9b

Vulnerability: This vulnerability stems from improper verification of cryptographic signatures during the release process, which may allow an attacker with high privileges to compromise the integrity of the browser installation.

Business Impact

A CVSS score of 8.0 indicates a high risk to the software's integrity. If an attacker can successfully bypass signature verification, they could potentially distribute malicious updates or payloads, leading to full browser compromise and potential data theft for end-users.

Remediation Plan

Immediate Action: Update Zen Browser to version 1.19.9b or later to ensure proper cryptographic signature verification is enforced.

Proactive Monitoring: Monitor for any anomalies in browser update processes and ensure that only official, signed binaries are deployed to workstations.

Compensating Controls: Utilize endpoint security solutions to block the execution of unsigned or improperly signed binaries on systems where Zen Browser is deployed.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 13, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability effectively undermines the security trust model of the software update mechanism.

Analyst Recommendation

This vulnerability represents a significant risk to the supply chain of the browser. Organizations must prioritize upgrading to the latest version to ensure that cryptographic integrity checks are functioning correctly, preventing the potential installation of unauthorized code.

---METADATA---
VENDOR: Espressif Systems
PRODUCT: arduino-esp32
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
The arduino-esp32 core, used for various ESP32 microcontrollers, contains an unspecified high-severity vulnerability requiring urgent security review.

Executive Summary:
A high-severity vulnerability exists in the arduino-esp32 core, potentially impacting the security posture of devices utilizing ESP32, ESP32-S, and ESP32-C series microcontrollers.

Vulnerability Details

CVE-ID: CVE-2026-41429

Affected Software: Espressif Systems arduino-esp32

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability affects the Arduino development framework for ESP32 microcontrollers. While specific technical details are currently limited, the high CVSS score of 8.8 suggests a significant risk, likely involving memory corruption or privilege escalation within the microcontroller's runtime.

Business Impact

A CVSS score of 8.8 indicates a high risk of system compromise. In an IoT or industrial context, exploitation could lead to unauthorized control over microcontrollers, potentially disrupting critical operations or allowing attackers to intercept data transmitted by connected sensors and devices.

Remediation Plan

Immediate Action: Monitor the official Espressif Systems and Arduino GitHub repositories for security advisories and apply the latest firmware or library core updates as they become available.

Proactive Monitoring: Audit device logs and network traffic for anomalous behavior originating from ESP32-based devices, which may indicate attempted exploitation.

Compensating Controls: Isolate IoT devices on segmented networks to limit the potential impact if a device is compromised via this vulnerability.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the broad deployment of ESP32 microcontrollers, IT teams should inventory all devices using the arduino-esp32 core. Apply vendor-provided patches as soon as they are released to mitigate the risk of remote compromise.

---METADATA---
VENDOR: Budibase
PRODUCT: Budibase
AFFECTED_VERSIONS: Prior to 3.35.4
---END_METADATA---

Description Summary:
Budibase contains an authentication bypass vulnerability where unanchored regular expressions allow attackers to access protected endpoints via crafted query strings.

Executive Summary:
An authentication bypass vulnerability in Budibase allows unauthenticated attackers to access restricted endpoints, posing a severe risk to data confidentiality and integrity.

Vulnerability Details

CVE-ID: CVE-2026-41428

Affected Software: Budibase

Affected Versions: Prior to 3.35.4

Vulnerability: The application utilizes unanchored regular expressions in its middleware to validate request URLs. Attackers can leverage this to bypass authentication by appending a public endpoint path as a query parameter, effectively tricking the system into granting unauthorized access.

Business Impact

With a CVSS score of 9.1, this vulnerability is critical as it allows for the complete compromise of administrative and system-level functions. Unauthorized access could lead to the exposure of sensitive platform data, modification of user accounts, or full system takeover, resulting in significant operational disruption and loss of trust.

Remediation Plan

Immediate Action: Upgrade Budibase to version 3.35.4 or later immediately to implement the corrected regex anchoring logic.

Proactive Monitoring: Review web server access logs for anomalous requests containing suspicious query parameters that mimic internal API paths.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules designed to inspect and filter query strings for unauthorized path traversal or API endpoint manipulation patterns.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this authentication bypass cannot be overstated, as it effectively removes the primary security barrier for the platform. Administrators must prioritize the patch application in all production instances of Budibase to prevent unauthorized lateral movement and data exfiltration.

---METADATA---
VENDOR: Daptin
PRODUCT: Daptin
AFFECTED_VERSIONS: < 0.11.4
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/daptin/daptin/security/advisories/GHSA-rw2c-8rfq-gwfv","name":"https://github.com/daptin/daptin/security/advisories/GHSA-rw2c-8rfq-gwfv","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/daptin/daptin/releases/tag/v0.11.4","name":"https://github.com/daptin/daptin/releases/tag/v0.11.4","tags":["x_refsource_MISC"]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T11:28:53.534Z
---END_METADATA---

Description Summary:
Daptin before 0.11.4 allows authenticated users to inject arbitrary SQL expressions via the aggregate endpoint.

Executive Summary:
An authenticated SQL injection vulnerability in Daptin before version 0.11.4 allows attackers to execute arbitrary database queries and compromise data integrity.

Vulnerability Details

CVE-ID: CVE-2026-41422

Affected Software: Daptin Daptin

Affected Versions: < 0.11.4

Vulnerability: This is an SQL injection vulnerability (CWE-89) affecting the aggregate endpoint, where query parameters are passed without validation to a raw SQL expression builder. The attacker authentication level is low, requiring any valid user session.

Business Impact

A successful exploit of this vulnerability could allow malicious actors to extract sensitive data, modify database contents, or disrupt service availability. Given the CVSS score of 8.3, the issue represents a high severity risk that directly threatens the confidentiality and integrity of core business applications.

Remediation Plan

Immediate Action: Update Daptin to version 0.11.4 or later immediately.

Proactive Monitoring: Monitor application access logs for unusual traffic patterns and inspect database query execution times for anomalous behavior.

Compensating Controls: Deploy a Web Application Firewall to inspect and filter malicious payloads targeting the aggregate API endpoint if immediate patching is not feasible.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 9, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability.

Analyst Recommendation

Organizations utilizing Daptin must apply the official vendor security update to version 0.11.4 without delay. Prompt remediation is critical to prevent authenticated attackers from leveraging SQL injection to compromise the underlying database systems.

---METADATA---
VENDOR: SiYuan
PRODUCT: SiYuan
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
SiYuan, an open-source personal knowledge management system, is affected by a high-severity vulnerability that could lead to unauthorized access or system compromise.

Executive Summary:
A security vulnerability in the SiYuan knowledge management system poses a high risk to the confidentiality and integrity of stored personal data.

Vulnerability Details

CVE-ID: CVE-2026-41421

Affected Software: SiYuan

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability affects SiYuan, an open-source knowledge management platform. With a CVSS score of 8.8, the flaw likely involves improper authentication or input validation, potentially allowing an attacker to access user data or gain unauthorized control over the local instance.

Business Impact

The high CVSS score of 8.8 suggests a significant risk to users and organizations utilizing SiYuan. Successful exploitation could result in the unauthorized disclosure of sensitive knowledge bases, personal notes, or proprietary information stored within the system.

Remediation Plan

Immediate Action: Update SiYuan to the latest version released by the vendor to address the identified security flaw.

Proactive Monitoring: Audit access logs for the SiYuan application to identify any suspicious login attempts or unauthorized access to notes.

Compensating Controls: Ensure that the SiYuan instance is not exposed directly to the public internet and use VPN or proxy access to restrict exposure.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Users and administrators of SiYuan should check the project's official security pages and apply updates immediately. Given the nature of knowledge management software, protecting the confidentiality of stored data should be the highest priority.

---METADATA---
VENDOR: RARgames
PRODUCT: 4ga Boards
AFFECTED_VERSIONS: < 3.3.5
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/RARgames/4gaBoards/security/advisories/GHSA-rrjq-7x8g-cmgm","name":"https://github.com/RARgames/4gaBoards/security/advisories/GHSA-rrjq-7x8g-cmgm","tags":["x_refsource_CONFIRM"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.531Z
---END_METADATA---

Description Summary:
A path traversal vulnerability in 4ga Boards allows authenticated users with import privileges to perform unauthorized local file disclosure by importing malicious archives.

Executive Summary:
An authenticated path traversal vulnerability in 4ga Boards enables unauthorized local file disclosure, posing a significant risk to data confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-41419

Affected Software: RARgames 4ga Boards

Affected Versions: < 3.3.5

Vulnerability: This is a path traversal vulnerability (CWE-22) occurring within the board import functionality. An authenticated user possessing board import privileges can manipulate the archive import process to force the server to ingest arbitrary local files, which are then accessible via the application interface.

Business Impact

The ability to perform unauthorized local file disclosure can lead to the exposure of sensitive configuration files, internal system data, or credentials stored on the host server. With a CVSS score of 7.6, this vulnerability represents a high risk to organizational security, as it facilitates the exfiltration of private information that could be leveraged for further attacks or compliance violations.

Remediation Plan

Immediate Action: Update the 4ga Boards installation to version 3.3.5 or later to resolve the underlying path traversal flaw.

Proactive Monitoring: Audit application access logs for unusual patterns involving file imports or requests to unexpected file paths that may indicate an attempt to access sensitive system files.

Compensating Controls: Restrict board import privileges to a strictly limited set of trusted users and implement file system permissions that prevent the application service account from accessing directories outside of its intended scope.

Exploitation Status

Public Exploit Available: No (Exploit available: false)

Analyst Notes: As of April 26, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently exploitable by any user granted the specific import permissions necessary to trigger the archive ingestion process.

Analyst Recommendation

The severity of this flaw necessitates immediate remediation, as it provides a direct path for attackers to bypass access controls and obtain sensitive server-side data. Administrators must prioritize upgrading to version 3.3.5 to eliminate the vulnerability. Until an update is applied, organizations should audit user permissions to ensure that only essential personnel hold the privileges required to import board archives, thereby reducing the attack surface.

---METADATA---
VENDOR: GitHub
PRODUCT: Skim
AFFECTED_VERSIONS: < bf63404ad51985b00ed304690ba9d477860a5a75
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/skim-rs/skim/security/advisories/GHSA-9g93-rxr5-xhqw","name":"https://github.com/skim-rs/skim/security/advisories/GHSA-9g93-rxr5-xhqw","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/skim-rs/skim/commit/bf63404ad51985b00ed304690ba9d477860a5a75","name":"https://github.com/skim-rs/skim/commit/bf63404ad51985b00ed304690ba9d477860a5a75","tags":["x_refsource_MISC"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.531Z
---END_METADATA---

Description Summary:
A code injection vulnerability in the Skim GitHub Actions workflow allows unauthenticated attackers to execute arbitrary code by submitting a malicious pull request.

Executive Summary:
An unauthenticated code injection vulnerability in the Skim project allows attackers to execute arbitrary code via malicious pull requests, posing a significant risk to repository integrity.

Vulnerability Details

CVE-ID: CVE-2026-41414

Affected Software: GitHub Skim

Affected Versions: < bf63404ad51985b00ed304690ba9d477860a5a75

Vulnerability: The vulnerability exists in the generate-files job within the GitHub Actions workflow, which insecurely checks out and executes code from attacker-controlled forks. This allows any unauthenticated GitHub user to trigger code execution with access to sensitive environment variables, including the GITHUB_TOKEN.

Business Impact

The exploitation of this vulnerability could lead to unauthorized repository modifications, leakage of sensitive build secrets, and potential supply chain compromise. Given the CVSS score of 7.4, this flaw represents a high risk to the development pipeline, as it enables an attacker to gain write access to the project and potentially pivot into internal infrastructure.

Remediation Plan

Immediate Action: Update the project configuration to the commit bf63404ad51985b00ed304690ba9d477860a5a75 or higher to resolve the insecure workflow execution.

Proactive Monitoring: Review GitHub Actions execution logs for anomalous jobs triggered by pull requests from untrusted contributors or external forks.

Compensating Controls: Implement strict permissions for GitHub Actions tokens and use environment protection rules to require manual approval for workflows triggered by pull requests from outside the organization.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 26, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous due to its accessibility to any public GitHub user.

Analyst Recommendation

This vulnerability presents a severe risk to repository security by allowing unauthenticated code execution via the CI/CD pipeline. Administrators must prioritize the application of the provided patch immediately to prevent potential supply chain attacks. Continuous oversight of workflow permissions is essential to prevent similar future incidents.

---METADATA---
VENDOR: Apache
PRODUCT: MINA
AFFECTED_VERSIONS: 2.0.0 <= 2.0.27, 2.1.0 <= 2.1.10, 2.2.0 <= 2.2.5
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
An incomplete fix for deserialization vulnerabilities in Apache MINA’s AbstractIoBuffer allows attackers to bypass allowlist protections via early static initializer execution.

Executive Summary:
A critical deserialization vulnerability in Apache MINA allows remote code execution due to an incomplete fix in the classname allowlist implementation.

Vulnerability Details

CVE-ID: CVE-2026-41409

Affected Software: Apache MINA

Affected Versions: 2.0.0 <= 2.0.27, 2.1.0 <= 2.1.10, 2.2.0 <= 2.2.5

Vulnerability: The vulnerability exists because the classname allowlist is applied too late during the deserialization process in AbstractIoBuffer.getObject(), allowing malicious classes to be initialized.

Business Impact

With a CVSS score of 9.8, this vulnerability poses a severe threat to any application utilizing the Apache MINA framework for object deserialization. Successful exploitation allows an attacker to achieve remote code execution on the host system, potentially resulting in full system compromise and data breach.

Remediation Plan

Immediate Action: Update Apache MINA to versions 2.0.28, 2.1.11, or 2.2.6, which implement the classname allowlist earlier in the deserialization process.

Proactive Monitoring: Review application performance and error logs for unexpected class loading or deserialization exceptions that may indicate exploitation attempts.

Compensating Controls: If upgrading is not immediately feasible, restrict the exposure of services that deserialize untrusted data to minimize the attack surface.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Apr 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability highlights the dangers of insecure deserialization, which is a frequent target for remote attackers. Administrators must verify their current MINA version and apply the recommended security updates to ensure the classname allowlist is enforced correctly.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: AntAISecurityLab (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-p464-m8x6-vhv8","name":"GitHub Security Advisory (GHSA-p464-m8x6-vhv8)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/3834d47099dd13c8244ed6de8b9ea9855c553623","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-resource-exhaustion-via-unauthenticated-ms-teams-webhook-body-parsing","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.679Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.31 allows unauthenticated remote attackers to cause resource exhaustion by sending malicious MS Teams webhook payloads that are parsed before JWT validation occurs.

Executive Summary:
A vulnerability in OpenClaw allows unauthenticated attackers to trigger a denial of service through resource exhaustion via manipulated MS Teams webhook requests.

Vulnerability Details

CVE-ID: CVE-2026-41405

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.31

Vulnerability: The application incorrectly orders its request processing, parsing MS Teams webhook bodies prior to performing necessary JWT authentication checks. This flaw allows unauthenticated remote attackers to send specially crafted payloads that exhaust server resources.

Business Impact

The exploitation of this vulnerability can lead to significant denial of service, rendering the application unavailable to legitimate users. With a CVSS score of 7.5, the risk is elevated because the attack is network-exploitable and requires no authentication, potentially resulting in operational disruption and service downtime for organizations relying on this integration.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later, as provided in the npm repository, to ensure proper authentication order is enforced.

Proactive Monitoring: Monitor server CPU and memory utilization logs for sudden, anomalous spikes associated with incoming webhook traffic.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an API gateway to perform request validation and rate limiting before the traffic reaches the vulnerable application logic.

Exploitation Status

Public Exploit Available: No (exploit_available: unknown)

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of required authentication, making it a highly attractive target for automated scanning and exploitation.

Analyst Recommendation

Given the ease of exploitation, this vulnerability poses a clear risk to service availability. Organizations should prioritize updating their instances to the patched version immediately to prevent potential denial of service attacks. If an immediate update is not feasible, implement strict rate limiting and filtering on the webhook endpoint to mitigate the impact.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: Christopher Lusk (@north-echo) (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-g374-mggx-p6xc","name":"GitHub Security Advisory (GHSA-g374-mggx-p6xc)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/8b88b927cb0747ad24d95b07d35682bf85dc5b0e","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-operator-admin-privilege-escalation-via-trusted-proxy-authentication","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy Authentication","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.679Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.31 is vulnerable to privilege escalation in trusted-proxy authentication mode, allowing authenticated users to elevate their privileges to operator.admin.

Executive Summary:
A vulnerability in OpenClaw allows authenticated users to perform unauthorized privilege escalation to administrative levels, posing a high risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-41404

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.31

Vulnerability: This flaw involves incorrect authorization (CWE-863) within the trusted-proxy authentication mode, where scope-clearing is incomplete. An attacker with low privileges can declare operator scopes on non-Control-UI clients to maintain elevated permissions across identity-bearing paths.

Business Impact

Successful exploitation allows an attacker to gain operator.admin privileges, which grants full control over the affected system. This compromise of authorization controls can lead to unauthorized data access, system manipulation, and complete administrative takeover, justifying the CVSS score of 8.8.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later via your package manager to resolve the authorization flaw.

Proactive Monitoring: Review authentication and authorization logs for anomalous scope declarations or unexpected administrative access patterns by low-privileged accounts.

Compensating Controls: If immediate patching is not feasible, restrict access to the affected environment to trusted networks only and disable trusted-proxy authentication mode if possible.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires an existing authenticated session, which limits the attack surface to those who have already gained initial access to the application.

Analyst Recommendation

Given the potential for full administrative compromise, administrators should prioritize updating to version 2026.3.31 immediately. Organizations using OpenClaw in trusted-proxy configurations are at the highest risk and should ensure that all identity-bearing paths are protected by the latest security patches.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: wang dong (@topsec-bunney) (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-f44p-c7w9-7xr7","name":"GitHub Security Advisory (GHSA-f44p-c7w9-7xr7)","tags":["vendor-advisory"]},{"url":"https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-unbounded-pre-auth-websocket-upgrades","name":"VulnCheck Advisory: OpenClaw < 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket Upgrades","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.679Z
---END_METADATA---

Description Summary:
OpenClaw is vulnerable to a denial of service attack due to unbounded concurrent unauthenticated WebSocket upgrades that can exhaust system resources.

Executive Summary:
An unauthenticated resource exhaustion vulnerability in OpenClaw allows remote attackers to disrupt service availability by overwhelming WebSocket connections.

Vulnerability Details

CVE-ID: CVE-2026-41399

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.28

Vulnerability: The application fails to implement proper resource throttling for WebSocket upgrades, allowing unauthenticated attackers to consume all available socket and worker capacity.

Business Impact

Successful exploitation of this flaw leads to a denial of service, rendering the affected application unavailable to legitimate users. With a CVSS score of 7.5, this vulnerability represents a high risk to business continuity, particularly for services that rely on real-time WebSocket communication for core operations.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to implement necessary resource limits.

Proactive Monitoring: Monitor server resource utilization, specifically tracking active WebSocket connection counts and worker thread saturation levels for anomalous spikes.

Compensating Controls: Deploy a Web Application Firewall or load balancer capable of rate-limiting incoming WebSocket upgrade requests to prevent resource exhaustion from unauthenticated sources.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any network-adjacent attacker due to the lack of pre-authentication budget allocation.

Analyst Recommendation

Given the ease of exploitation and the potential for significant service disruption, organizations should prioritize upgrading to version 2026.3.28 immediately. If an immediate update is not feasible, implement strict connection rate limiting at the network perimeter to mitigate the risk of resource exhaustion.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: Nathan (@nexrin) (reporter); KeenSecurityLab (finder); qclawer (finder)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-qcj9-wwgw-6gm8","name":"GitHub Security Advisory (GHSA-qcj9-wwgw-6gm8)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/330a9f98cb29c79b1c16a2117e03d6276a0d6289","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-environment-variable-override-of-plugin-trust-root","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.683Z
---END_METADATA---

Description Summary:
OpenClaw allows workspace .env files to override the plugin directory environment variable, enabling the injection of malicious plugins through compromised workspace configurations.

Executive Summary:
A critical vulnerability in OpenClaw allows attackers to execute arbitrary code by manipulating environment variables to inject malicious plugins into the workspace.

Vulnerability Details

CVE-ID: CVE-2026-41396

Affected Software: OpenClaw

Affected Versions: 0 up to 2026.3.31

Vulnerability: This vulnerability, categorized as CWE-829, occurs because the application fails to properly sanitize the OPENCLAW_BUNDLED_PLUGINS_DIR environment variable when defined in a local workspace .env file. An attacker who can influence the workspace configuration can force the application to load plugins from an untrusted directory, bypassing trust verification mechanisms.

Business Impact

The ability to inject malicious plugins grants an attacker the power to execute arbitrary code within the context of the OpenClaw environment. With a CVSS score of 7.8, this flaw represents a significant risk to data integrity and system confidentiality, as compromised plugins can access sensitive workspace data or facilitate lateral movement within the development environment.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.31 or later to implement the fix for environment variable overrides.

Proactive Monitoring: Review application logs for unexpected plugin loading paths or unauthorized modifications to local workspace configuration files.

Compensating Controls: Restrict write access to workspace directories and .env files to prevent unauthorized users from modifying environmental configurations.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the ease with which environment variables can be manipulated in standard development workflows.

Analyst Recommendation

Given the potential for complete system compromise via arbitrary code execution, this vulnerability poses a severe threat to development environments. Organizations should prioritize the immediate update of OpenClaw to the patched version, 2026.3.31, to ensure that plugin trust verification cannot be bypassed via local environment configurations.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: zsx (@zsxsoft) (reporter); KeenSecurityLab (finder)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-8689-gm9g-jgr6","name":"GitHub Security Advisory (GHSA-8689-gm9g-jgr6)","tags":["vendor-advisory"]},{"url":"https://www.vulncheck.com/advisories/openclaw-webhook-replay-via-query-parameter-reordering-in-plivo-v3","name":"VulnCheck Advisory: OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.683Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that allows attackers to bypass replay detection and trigger duplicate voice-call processing.

Executive Summary:
An unauthenticated webhook replay vulnerability in OpenClaw allows attackers to bypass security checks and trigger unauthorized duplicate voice-call processing.

Vulnerability Details

CVE-ID: CVE-2026-41395

Affected Software: OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.28

Vulnerability: The application incorrectly canonicalizes query parameters during signature verification for Plivo V3 webhooks while hashing raw URLs for replay detection, allowing an unauthenticated attacker to reorder parameters and bypass the replay cache.

Business Impact

This vulnerability poses a significant risk to the integrity of voice-call processing workflows. Successful exploitation allows for the unauthorized triggering of duplicate calls, which can lead to service exhaustion, financial loss from fraudulent call charges, and disruption of legitimate business communications. With a CVSS score of 7.5, the issue is classified as High severity due to the potential for automated abuse.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the correct canonicalization logic for webhook signature verification.

Proactive Monitoring: Review application logs for anomalous patterns of duplicate webhook requests or high-frequency triggers originating from identical source payloads.

Compensating Controls: Implement strict rate limiting on webhook processing endpoints and ensure that backend services perform stateful checks to identify and discard duplicate request identifiers.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit or weaponized code available in the provided data.

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any network-adjacent attacker capable of intercepting and reordering request parameters.

Analyst Recommendation

The risk posed by this replay vulnerability is substantial for any organization relying on Plivo V3 webhooks for voice infrastructure. IT and security teams should prioritize upgrading to version 2026.3.28 immediately to ensure that webhook integrity checks cannot be bypassed. Failure to patch allows for potential service abuse and unauthorized call execution that could impact both operational costs and system availability.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: davidluzsilva (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhgq-xpfq-6r66","name":"GitHub Security Advisory (GHSA-mhgq-xpfq-6r66)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/2a1db0c0f1fa375004a95ba0ef030534790a6d47","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-unauthorized-operator-scope-access-in-unauthenticated-plugin-auth-routes","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth Routes","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.683Z
---END_METADATA---

Description Summary:
An authentication bypass in OpenClaw allows unauthenticated attackers to access plugin-auth routes and perform privileged operator actions.

Executive Summary:
An authentication bypass vulnerability in OpenClaw allows unauthenticated attackers to execute unauthorized operator-level actions, posing a significant risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-41394

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.31

Vulnerability: This vulnerability, classified as CWE-862 (Missing Authorization), occurs because unauthenticated plugin-auth HTTP routes incorrectly grant operator runtime write scopes. This allows an unauthenticated attacker to interact with sensitive administrative endpoints that should be restricted to authorized users.

Business Impact

Successful exploitation allows an unauthenticated actor to perform privileged runtime actions, which could lead to unauthorized system modifications or data manipulation. Given the CVSS score of 8.2, this vulnerability is classified as High severity. The ability to perform these actions without prior authentication creates a significant risk of administrative takeover within the affected environment.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later immediately to resolve the missing authorization flaw.

Proactive Monitoring: Review web server and application access logs for suspicious requests targeting the plugin-auth directory, particularly those originating from unauthorized or external IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block unauthorized access attempts to the plugin-auth HTTP routes until the software can be patched.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is highly accessible, as the lack of authentication requirements makes it automatable for remote attackers.

Analyst Recommendation

The high severity of this vulnerability necessitates immediate action, as it allows for unauthorized privileged actions without any required authentication. Administrators should prioritize upgrading to version 2026.3.31 to eliminate this risk entirely. Failure to patch may expose the system to unauthorized modifications that could compromise the operational integrity of the OpenClaw environment.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.22
CONFIDENCE: high
MISSING: none
CREDITS: tdjackey (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-j7p2-qcwm-94v4","name":"GitHub Security Advisory (GHSA-j7p2-qcwm-94v4)","tags":["vendor-advisory"]},{"url":"https://www.vulncheck.com/advisories/openclaw-supply-chain-redirection-via-incomplete-host-environment-sanitization","name":"VulnCheck Advisory: OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.683Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.22 allows attackers to perform package manager environment overrides due to improper sanitization of environment variables, potentially leading to the execution of trojanized content.

Executive Summary:
A vulnerability in OpenClaw allows attackers to redirect package resolution and execute arbitrary code via environment variable manipulation, posing a significant supply chain risk.

Vulnerability Details

CVE-ID: CVE-2026-41387

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.22

Vulnerability: This is a permissive input validation flaw (CWE-183) located in the environment security policy configuration files. The vulnerability allows an unauthenticated attacker to inject environment overrides that redirect package resolution or runtime bootstrapping to malicious infrastructure.

Business Impact

The ability to redirect package resolution enables an attacker to supply malicious or trojanized code during the build or runtime process. This bypasses supply chain integrity, potentially leading to full system compromise and the exfiltration of sensitive data. Given the CVSS score of 7.8, this flaw represents a high risk to software development environments and production infrastructure that rely on the OpenClaw package manager.

Remediation Plan

Immediate Action: Update the OpenClaw package manager to version 2026.3.22 or later to apply the necessary security sanitization patches.

Proactive Monitoring: Review build logs and environment configurations for unexpected package source redirections or unusual network traffic initiated by the package manager during deployment.

Compensating Controls: Implement strict environment variable controls and restrict the ability of build processes to modify environment parameters to prevent unauthorized overrides.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the exploitability is high due to the nature of the flaw, current threat intelligence indicates no confirmed in the wild activity.

Analyst Recommendation

Organizations utilizing OpenClaw must prioritize the upgrade to version 2026.3.22 immediately. Given that this vulnerability facilitates supply chain attacks, failing to patch could lead to the silent deployment of malicious code within your infrastructure. Apply the update as soon as possible to ensure the integrity of your software development pipeline.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Before 2026.3.22
---END_METADATA---

Description Summary:
A privilege escalation vulnerability in OpenClaw during device pairing allows attackers to gain unauthorized access by manipulating device roles.

Executive Summary:
OpenClaw contains a critical privilege escalation flaw that allows unauthorized users to manipulate device roles during the pairing process.

Vulnerability Details

CVE-ID: CVE-2026-41386

Affected Software: OpenClaw

Affected Versions: Before 2026.3.22

Vulnerability: Bootstrap setup codes are not properly bound to specific device roles or scopes, allowing an unauthenticated attacker to escalate privileges during initial pairing.

Business Impact

The CVSS score of 9.1 underscores the critical nature of this flaw, which allows an attacker to bypass intended access controls. This could lead to unauthorized administrative control over devices, potentially exposing sensitive operational data or allowing for broader network compromise.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.22 or later immediately to enforce proper scope and role binding during pairing.

Proactive Monitoring: Review system logs for pairing events and privilege changes that occur during the onboarding of new devices.

Compensating Controls: Implement strict physical and network access controls during the device pairing window to minimize the exposure to unauthorized individuals.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Apr 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Updating to the latest version is mandatory to correct the logic error in the pairing process. Administrators should ensure that all new device onboarding follows the updated, secure pairing procedures defined in the latest documentation.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.24
CONFIDENCE: high
MISSING: none
CREDITS: Edward-x (@YLChen-007) (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-vfw7-6rhc-6xxg","name":"GitHub Security Advisory (GHSA-vfw7-6rhc-6xxg)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/c2fb7f1948c3226732a630256b5179a60664ec24","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-workspace-config-in-cli-backend","name":"VulnCheck Advisory: OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.683Z
---END_METADATA---

Description Summary:
OpenClaw versions prior to 2026.3.24 are susceptible to an environment variable injection vulnerability in the CLI backend runner that could lead to code execution or sensitive data exposure.

Executive Summary:
An environment variable injection vulnerability in OpenClaw allows attackers to manipulate workspace configurations to achieve code execution or sensitive data exposure.

Vulnerability Details

CVE-ID: CVE-2026-41384

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.24

Vulnerability: This vulnerability, categorized as CWE-15, stems from insufficient sanitization of workspace configuration settings in the CLI backend. An attacker can inject malicious environment variables, which are then processed by the backend during the spawning of sub-processes, allowing for unauthorized system manipulation.

Business Impact

The potential for code execution and the exposure of sensitive data poses a severe risk to organizational security. Given the CVSS score of 7.8, this vulnerability is classified as High, indicating that successful exploitation could lead to full system compromise, loss of data integrity, and significant operational disruption.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.24 or later immediately to incorporate the necessary input sanitization patches.

Proactive Monitoring: Review system logs and workspace configuration files for unusual entries or unexpected process spawning patterns.

Compensating Controls: Restrict access to workspace configuration files and ensure that the CLI runner is executed within a containerized or restricted environment to limit the impact of potential environment variable manipulation.

Exploitation Status

Public Exploit Available: No — exploit_available (false).

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability requires user interaction via a malicious workspace configuration, which slightly limits the attack surface.

Analyst Recommendation

The severity of this issue necessitates prompt action to protect the integrity of the development environment. Organizations should prioritize patching OpenClaw to the latest version to eliminate the risk of environment variable injection and the subsequent potential for remote code execution.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.4.2
CONFIDENCE: high
MISSING: none
CREDITS: jufeng123768 (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-m34q-h93w-vg5x","name":"GitHub Security Advisory (GHSA-m34q-h93w-vg5x)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/b21c9840c2e38f4bb338d031511b479d5f07ca25","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-arbitrary-remote-directory-deletion-via-mis-scoped-mirror-mode-paths","name":"VulnCheck Advisory: OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Paths","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.683Z
---END_METADATA---

Description Summary:
OpenClaw before version 2026.4.2 is vulnerable to an arbitrary directory deletion flaw in mirror mode, allowing authenticated attackers to delete remote directories by manipulating configuration paths.

Executive Summary:
An authenticated directory traversal vulnerability in OpenClaw allows remote attackers to delete unintended directory contents, posing a significant risk to data integrity and system availability.

Vulnerability Details

CVE-ID: CVE-2026-41383

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.4.2

Vulnerability: This is a path traversal vulnerability (CWE-22) that allows an authenticated attacker to influence the remoteWorkspaceDir and remoteAgentWorkspaceDir configuration values. By manipulating these paths, an attacker can force the mirror sync process to delete arbitrary remote directories and replace them with malicious workspace data.

Business Impact

The ability to arbitrarily delete directories on a remote system facilitates severe data loss and potential service disruption. Given the CVSS score of 8.1, this vulnerability is classified as High, reflecting the significant impact on data integrity and availability, even though it requires low-privileged authentication to trigger.

Remediation Plan

Immediate Action: Upgrade the OpenClaw package to version 2026.4.2 or later to apply the necessary path validation fixes.

Proactive Monitoring: Review system logs for unauthorized modifications to configuration files and monitor for unusual file deletion activity initiated by the OpenClaw agent.

Compensating Controls: Implement strict file system permissions on the server to limit the write and delete access of the service account running the OpenClaw agent.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is highly impactful, the requirement for authenticated access limits the immediate attack surface.

Analyst Recommendation

Organizations utilizing OpenClaw must prioritize the upgrade to version 2026.4.2 to eliminate this path traversal risk. Failure to patch allows authenticated users to execute destructive actions against the underlying file system, potentially resulting in catastrophic data loss.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: AntAISecurityLab (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-gjm7-hw8f-73rq","name":"GitHub Security Advisory (GHSA-gjm7-hw8f-73rq)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/a77928b1087e90f2a8903f8e5aca6dec9237ac62","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-to-remote-code-execution-via-unrestricted-node-event-agent-dispatch","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Age","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.683Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.31 is vulnerable to privilege escalation where authenticated nodes can achieve remote code execution on the gateway via unrestricted node.event agent requests.

Executive Summary:
A privilege escalation vulnerability in OpenClaw allows authenticated node-level attackers to achieve remote code execution on the gateway, posing a critical risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-41378

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.31

Vulnerability: This vulnerability, categorized as CWE-862 (Missing Authorization), allows an attacker with trusted paired node credentials to dispatch node.event agent requests that bypass gateway-side security checks. By leveraging these unrestricted requests, a low-privileged node can escalate to remote code execution on the gateway.

Business Impact

The ability for a compromised or malicious node to execute arbitrary code on the gateway infrastructure represents a complete loss of confidentiality, integrity, and availability for the affected system. Given the CVSS score of 8.8, this vulnerability is classified as High severity and could allow an attacker to pivot into the internal network, exfiltrate sensitive data, or disrupt critical business operations.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later immediately to apply the necessary authorization checks.

Proactive Monitoring: Review system and gateway logs for unusual node.event dispatch patterns or unexpected agent-initiated commands originating from authorized node credentials.

Compensating Controls: Restrict network access to the gateway to only essential services and implement strict segmentation between node-level infrastructure and the core gateway management plane.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's exploitability is limited by the requirement for established, valid node credentials, which necessitates a prior compromise or unauthorized access to the node-pairing mechanism.

Analyst Recommendation

Organizations utilizing OpenClaw must prioritize the upgrade to version 2026.3.31 to remediate this authorization flaw. Because this vulnerability facilitates remote code execution upon the gateway, failure to patch leaves the entire management infrastructure susceptible to full system compromise by any compromised node.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: Peng Zhou (@zpbrent) (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-5r8f-96gm-5j6g","name":"GitHub Security Advisory (GHSA-5r8f-96gm-5j6g)","tags":["vendor-advisory"]},{"url":"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-chat-send-reset-command","name":"VulnCheck Advisory: OpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset Command","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.711Z
---END_METADATA---

Description Summary:
A privilege escalation vulnerability in the OpenClaw chat.send function allows low-privileged users to perform unauthorized administrative session resets.

Executive Summary:
A high-severity privilege escalation vulnerability in OpenClaw allows authenticated attackers to perform unauthorized administrative session resets, posing a significant risk to user account integrity.

Vulnerability Details

CVE-ID: CVE-2026-41371

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.28

Vulnerability: The vulnerability is an incorrect authorization flaw (CWE-863) located in the chat.send function. An authenticated user with write-scoped gateway access can bypass intended privilege restrictions to trigger administrative session operations, including forced session rotation and transcript state modification.

Business Impact

The ability for non-administrative users to reset session IDs and manipulate transcript history allows for potential account takeover and unauthorized access to sensitive communications. With a CVSS score of 8.5, this vulnerability represents a high risk to organizational security, as it undermines the core authentication and authorization controls protecting user and administrative sessions.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the necessary authorization logic fixes.

Proactive Monitoring: Review application access logs for unusual patterns involving the chat.send endpoint, specifically looking for session rotation commands originating from non-administrative user accounts.

Compensating Controls: Implement strict Web Application Firewall (WAF) rules to restrict access to chat-related administrative functions, ensuring that only verified administrative roles can invoke sensitive session management parameters.

Exploitation Status

Public Exploit Available: No (There is no confirmed public exploit or weaponized code available for this vulnerability).

Analyst Notes: As of April 29, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's exploitability is limited to authenticated users with specific gateway access, which requires an initial foothold within the application environment.

Analyst Recommendation

Given the severity of this privilege escalation flaw, administrators should prioritize updating OpenClaw to version 2026.3.28 immediately. Failure to patch allows authenticated users to bypass critical session security controls, which could lead to widespread unauthorized account access and data exposure.

---METADATA---
VENDOR: MLflow
PRODUCT: MLflow
AFFECTED_VERSIONS: mlflow mlflow/mlflow: unspecified up to (excluding) 3.11.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
MLflow versions prior to 3.11.0 are vulnerable to the creation of temporary files with insecure permissions, potentially allowing local attackers to gain unauthorized access to sensitive information.

Executive Summary:
MLflow versions prior to 3.11.0 contain a vulnerability involving insecure temporary file permissions that could lead to unauthorized local data access.

Vulnerability Details

CVE-ID: CVE-2026-4137

Affected Software: MLflow

Affected Versions: mlflow mlflow/mlflow: unspecified up to (excluding) 3.11.0

Vulnerability: This is an insecure file permission issue (CWE-378) where temporary files are created with overly permissive access rights. Exploitation requires local access to the system (AV:L) and specific conditions regarding the local environment.

Business Impact

While the attack vector requires local access, successful exploitation could allow an attacker to read or modify sensitive temporary data, potentially leading to privilege escalation or the theft of credentials stored within the MLflow workspace. The CVSS score of 7.0 (High) reflects the potential for full compromise of the affected local environment.

Remediation Plan

Immediate Action: Update the MLflow package to version 3.11.0 or later to ensure temporary files are created with appropriate, restrictive system permissions.

Proactive Monitoring: Monitor local file system activity for unexpected file creation or access patterns within temporary directories used by MLflow services.

Compensating Controls: Implement strict OS-level access controls and ensure that the service runs with the least privilege necessary, minimizing the impact if a local attacker attempts to leverage insecure files.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 19, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The requirement for local access naturally limits the attack surface to multi-user or compromised-host scenarios.

Analyst Recommendation

Administrators should prioritize updating to the patched version 3.11.0 to close this local security gap. Ensure that all systems running MLflow are hardened with appropriate file system permissions to further mitigate risk.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: AntAISecurityLab (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-fv94-qvg8-xqpw","name":"GitHub Security Advisory (GHSA-fv94-qvg8-xqpw)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/3d5af14984ac1976c747a8e11581d697bd0829dc","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-arbitrary-file-write-via-symlink-following-in-ssh-sandbox-tar-upload","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:39.711Z
---END_METADATA---

Description Summary:
OpenClaw versions before 2026.3.31 are vulnerable to a symlink following flaw during SSH sandbox tar uploads, allowing authenticated remote attackers to perform arbitrary file writes.

Executive Summary:
A symlink following vulnerability in the OpenClaw SSH sandbox allows authenticated attackers to perform arbitrary file writes, potentially leading to unauthorized system modification.

Vulnerability Details

CVE-ID: CVE-2026-41364

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.31

Vulnerability: This vulnerability, classified as CWE-59, involves improper link resolution during the processing of uploaded tar archives. An authenticated remote attacker can include symlinks within a malicious archive to escape the intended sandbox and overwrite critical files on the underlying host.

Business Impact

The ability to overwrite arbitrary files on a host system presents a severe risk to data integrity and system availability. Successful exploitation could allow an attacker to modify configuration files, overwrite binary executables, or inject malicious scripts, effectively compromising the affected server. Given the CVSS score of 8.1, this vulnerability is considered high severity, as it facilitates significant impact on system integrity and availability.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later to implement the necessary security checks for symlink resolution during file extraction.

Proactive Monitoring: Review system access logs for anomalous file write activity or unexpected processes triggered by user-uploaded archives.

Compensating Controls: Restrict SSH access to the sandbox environment to trusted users only and implement strict filesystem permissions to prevent the application process from modifying sensitive system directories.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 29, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's exploitability is limited to authenticated users, which necessitates a strong identity and access management strategy to reduce the attack surface.

Analyst Recommendation

Organizations utilizing OpenClaw must prioritize the upgrade to version 2026.3.31 immediately. Failure to address this vulnerability allows authenticated users the capability to perform unauthorized file operations, which could serve as a precursor to a broader system compromise. Ensure that all deployment pipelines are updated to reference the patched version to maintain a secure posture.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: Nicky (@nicky-cc) of Tencent zhuque Lab (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-g86v-f9qv-rh6m","name":"GitHub Security Advisory (GHSA-g86v-f9qv-rh6m)","tags":["vendor-advisory"]},{"url":"https://www.vulncheck.com/advisories/openclaw-ssrf-guard-bypass-via-ipv6-special-use-ranges","name":"VulnCheck Advisory: OpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.535Z
---END_METADATA---

Description Summary:
OpenClaw contains an SSRF guard bypass vulnerability due to an incomplete list of disallowed IPv6 special-use ranges, allowing attackers to target internal resources.

Executive Summary:
An SSRF protection bypass vulnerability in OpenClaw allows authenticated attackers to potentially reach internal network resources via maliciously crafted IPv6 addresses.

Vulnerability Details

CVE-ID: CVE-2026-41361

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.28

Vulnerability: The software fails to implement a complete blocklist for IPv6 special-use ranges within its SSRF protection mechanism. By leveraging this flaw, an authenticated attacker can perform server-side request forgery to interact with restricted internal or non-routable IPv6 endpoints.

Business Impact

This vulnerability poses a significant risk to internal network segmentation and data confidentiality. Successful exploitation allows an attacker to bypass security perimeters, potentially exposing sensitive internal services or metadata endpoints that are not intended for public access. Given the CVSS score of 7.1, this is classified as a High-severity issue that requires prompt remediation to prevent unauthorized internal reconnaissance.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the expanded IPv6 address filtering.

Proactive Monitoring: Review application logs for suspicious outbound requests, particularly those involving IPv6 addresses or unexpected internal network scanning patterns.

Compensating Controls: Deploy or update Web Application Firewall rules to strictly filter and validate all URL inputs, specifically blocking traffic directed toward IPv6 special-use or loopback addresses.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is limited by the requirement for authenticated access, which serves as a primary barrier to entry for remote attackers.

Analyst Recommendation

The vulnerability represents a clear path for internal network discovery and potential exploitation of secondary services. Administrators should prioritize the update to version 2026.3.28 during the next maintenance cycle. Given the nature of SSRF, failing to patch this flaw leaves the underlying infrastructure vulnerable to lateral movement and unauthorized internal service interaction.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: Peng Zhou (@zpbrent) (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-767m-xrhc-fxm7","name":"GitHub Security Advisory (GHSA-767m-xrhc-fxm7)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/b7d70ade3b9900dbe97bd73be9c02e924ff3c986","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-operator-write-to-admin-class-telegram-config-and-cron-persistence","name":"VulnCheck Advisory: OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cr","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.535Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.28 allows authenticated operators with write permissions to escalate privileges and modify sensitive administrative configuration and persistence settings via the send endpoint.

Executive Summary:
A privilege escalation vulnerability in OpenClaw allows authenticated operators to modify administrative settings and persistence mechanisms, posing a significant risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-41359

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.28

Vulnerability: This is an improper privilege management flaw (CWE-269) where the application fails to perform adequate access control checks on the send endpoint. An authenticated user with operator.write privileges can bypass intended restrictions to access and modify restricted administrative Telegram configurations and cron persistence settings.

Business Impact

The ability for a lower-privileged operator to manipulate administrative configurations and persistence tasks represents a critical threat to the confidentiality and integrity of the application environment. Successful exploitation could lead to unauthorized system control or the establishment of persistent backdoors, directly impacting the availability and security posture of the infrastructure. Given the CVSS score of 7.1, this vulnerability is categorized as High severity, necessitating prompt remediation to prevent unauthorized administrative actions.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the necessary access control checks.

Proactive Monitoring: Review system and application audit logs for unauthorized access to the send endpoint or suspicious modifications to cron jobs and Telegram configuration files.

Compensating Controls: Implement strict network segmentation and restrict access to the application interface to trusted internal networks to limit the potential pool of attackers who could leverage compromised operator credentials.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires an authenticated account, the impact on persistence mechanisms makes this a high-value target for attackers who have already gained initial low-level access.

Analyst Recommendation

Organizations utilizing OpenClaw must prioritize updating to version 2026.3.28 immediately to address this privilege escalation flaw. Failure to patch allows authenticated operators to overstep their defined roles, potentially compromising the entire administrative backend. Please audit current operator accounts for suspicious activity as part of the remediation verification process.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: tdjackey (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-42mx-vp8m-j7qh","name":"GitHub Security Advisory (GHSA-42mx-vp8m-j7qh)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/c02ee8a3a4cb390b23afdf21317aa8b2096854d1","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openshell-arbitrary-code-execution-via-mirror-mode-sandbox-file-conversion","name":"VulnCheck Advisory: OpenShell < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.535Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.28 is vulnerable to arbitrary code execution in mirror mode when processing untrusted sandbox files into workspace hooks.

Executive Summary:
A critical arbitrary code execution vulnerability in OpenClaw allows attackers with mirror mode access to execute code on the host system during gateway startup.

Vulnerability Details

CVE-ID: CVE-2026-41355

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.28

Vulnerability: The software suffers from an inclusion of functionality from an untrusted control sphere (CWE-829). An authenticated user with mirror mode access can trigger arbitrary code execution on the host by converting malicious sandbox files into workspace hooks during the gateway startup process.

Business Impact

The ability for an attacker to execute arbitrary code on the host system represents a complete compromise of the application environment. Given the CVSS score of 7.3, this flaw poses a high risk to business operations, potentially leading to unauthorized data access, lateral movement within the network, or complete system takeover.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the upstream fix.

Proactive Monitoring: Review system logs for unusual gateway startup behaviors or unauthorized modifications to workspace hook configurations.

Compensating Controls: Restrict access to mirror mode functionality to trusted users only and implement strict file system permissions to prevent the placement of untrusted sandbox files.

Exploitation Status

Public Exploit Available: No confirmed public exploit (weaponized or otherwise) is available in the provided data.

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires specific access to mirror mode and user interaction, which constrains the immediate attack surface for external actors.

Analyst Recommendation

Organizations utilizing OpenClaw must prioritize updating to version 2026.3.28 immediately to neutralize the risk of arbitrary code execution. Because this vulnerability allows for full host compromise, failure to apply the update leaves the infrastructure exposed to potential remote or local attackers who gain access to the mirror mode environment.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.22
CONFIDENCE: high
MISSING: none
CREDITS: smaeljaish771 (reporter); KeenSecurityLab (finder)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-h5hg-h7rr-gpf3","name":"GitHub Security Advisory (GHSA-h5hg-h7rr-gpf3)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/eac93507c36ccd0c359fba18fa466ef6448be8a5","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-allowprofiles-bypass-via-profile-mutation-and-runtime-selection","name":"VulnCheck Advisory: OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature, allowing authenticated attackers to manipulate browser proxy profiles and bypass security restrictions.

Executive Summary:
A critical access control bypass vulnerability in OpenClaw allows authenticated attackers to manipulate profile settings and circumvent security restrictions, posing a significant risk to organizational policy enforcement.

Vulnerability Details

CVE-ID: CVE-2026-41353

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.22

Vulnerability: The software contains an access control bypass flaw stemming from the improper handling of immutable web parameters. An authenticated attacker can exploit this by performing persistent profile mutation and runtime profile selection to access restricted browser proxy configurations.

Business Impact

The ability to bypass intended access controls undermines the integrity of organizational security policies regarding network traffic and proxy usage. Successful exploitation could lead to unauthorized data exfiltration or access to restricted internal resources, potentially violating compliance requirements. Given the CVSS score of 8.1, this vulnerability represents a high-severity risk that could facilitate further unauthorized actions within the network environment.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.22 or later to resolve the underlying access control logic error.

Proactive Monitoring: Monitor application and proxy logs for unusual profile mutation activity or unauthorized attempts to access restricted proxy configurations during runtime.

Compensating Controls: Implement strict network-level egress filtering to restrict unauthorized proxy traffic if immediate patching is not possible.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous as it allows for the subversion of security controls by authenticated users, making it a priority for remediation in environments where profile isolation is a critical security requirement.

Analyst Recommendation

This vulnerability presents a significant risk to internal security controls and requires immediate attention. IT administrators should prioritize the deployment of version 2026.3.22 across all affected instances to eliminate the possibility of unauthorized profile manipulation. Failure to patch may result in the degradation of network security posture and potential unauthorized access to restricted segments.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: AntAISecurityLab (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-xj9w-5r6q-x6v4","name":"GitHub Security Advisory (GHSA-xj9w-5r6q-x6v4)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/3886b65ef21d02808c1a106fa1f9f69e22f71c32","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-remote-code-execution-via-node-scope-gate-bypass","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.31 allows authenticated attackers with device-pairing credentials to bypass node scope gate authentication and execute arbitrary commands on the host system.

Executive Summary:
A remote code execution vulnerability in OpenClaw allows attackers with valid device pairing credentials to execute unauthorized commands on the host system.

Vulnerability Details

CVE-ID: CVE-2026-41352

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.31

Vulnerability: This is a missing authorization flaw (CWE-862) occurring within the node scope gate authentication mechanism. The vulnerability permits an attacker who already possesses device-pairing credentials to bypass security checks and execute arbitrary commands on the underlying host system.

Business Impact

The ability to execute arbitrary code on a host system represents a critical security risk, potentially leading to a full system compromise, unauthorized data access, and lateral movement within the network. With a CVSS score of 8.8, this vulnerability is classified as High severity and necessitates immediate attention to prevent operational disruption or the theft of sensitive proprietary data.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later to implement the necessary authorization checks.

Proactive Monitoring: Review system and application access logs for unusual command execution patterns or unauthorized attempts to access the node scope gate interface.

Compensating Controls: Implement strict network segmentation to limit the reach of devices with pairing credentials, and ensure that access to the management interfaces is restricted to authorized personnel only.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires existing device pairing credentials, the impact of successful execution is severe.

Analyst Recommendation

Given the potential for remote code execution, organizations utilizing OpenClaw must prioritize updating to version 2026.3.31 immediately. Failure to patch allows authenticated attackers to escalate their privileges into full system control, posing an unacceptable risk to the integrity and availability of the host environment.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: Edward-x (@YLChen-007) (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-v3qc-wrwx-j3pw","name":"GitHub Security Advisory (GHSA-v3qc-wrwx-j3pw)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/76411b2afc4ae721e36c12e0ea24fd23e2fed61e","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-agentic-consent-bypass-via-config-patch","name":"VulnCheck Advisory: OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
OpenClaw before 2026.3.28 is vulnerable to an agentic consent bypass via the config.patch parameter, allowing attackers to disable security approvals.

Executive Summary:
A critical vulnerability in OpenClaw allows authenticated remote attackers to bypass security controls and execute unauthorized operations by disabling agentic consent mechanisms.

Vulnerability Details

CVE-ID: CVE-2026-41349

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.28

Vulnerability: This flaw, identified as CWE-862 (Missing Authorization), occurs within the agentic consent framework. An authenticated attacker can leverage the config.patch parameter to silently disable required execution approvals, permitting the unauthorized performance of operations without user consent.

Business Impact

The ability for an attacker to bypass consent controls poses a severe risk to the integrity and security of automated operations within the environment. Given the CVSS score of 8.8, this vulnerability is classified as High severity, as it enables unauthorized administrative-level actions that could lead to complete system compromise or data manipulation.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to resolve the underlying authorization flaw.

Proactive Monitoring: Review access and configuration logs for any unusual modifications to the config.patch parameter or unexpected agent behavior.

Compensating Controls: Restrict access to the configuration interfaces that allow modification of agent settings to only highly privileged, trusted service accounts.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability requires low-privileged authentication, which limits the initial attack surface, but the impact of bypassing security approvals is significant.

Analyst Recommendation

The severity of this authorization bypass necessitates immediate attention. Administrators must prioritize updating to the patched version, 2026.3.28, to ensure that agentic consent controls are properly enforced and to prevent unauthorized remote execution of operations.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: AntAISecurityLab (reporter)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-mhr7-2xmv-4c4q","name":"GitHub Security Advisory (GHSA-mhr7-2xmv-4c4q)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/6b3f99a11f4d070fa5ed2533abbb3d7329ea4f0d","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-cross-site-request-forgery-via-missing-browser-origin-validation-in-http-operator-endpoints","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Oper","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
OpenClaw versions prior to 2026.3.31 are vulnerable to cross-site request forgery due to missing origin validation in HTTP operator endpoints when configured in trusted-proxy mode.

Executive Summary:
A cross-site request forgery vulnerability in OpenClaw allows unauthenticated attackers to perform unauthorized actions on HTTP operator endpoints within trusted-proxy deployments.

Vulnerability Details

CVE-ID: CVE-2026-41347

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.31

Vulnerability: The application fails to validate the browser origin for HTTP operator endpoints when operating in trusted-proxy mode. This allows an unauthenticated attacker to trick a user into executing unintended actions by forcing their browser to send malicious requests to the vulnerable endpoints.

Business Impact

Successful exploitation allows an attacker to perform unauthorized state-changing operations on behalf of an authenticated user. This could lead to unauthorized administrative actions, configuration changes, or the manipulation of sensitive data, resulting in potential service disruption or loss of control over the affected infrastructure. Given the CVSS score of 7.1, this represents a significant security risk that necessitates prompt attention to protect the integrity of the application environment.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later to implement proper origin validation.

Proactive Monitoring: Review web server access logs for suspicious cross-origin request patterns or requests targeting sensitive operator endpoints that originate from unexpected referrers.

Compensating Controls: Deploy a Web Application Firewall (WAF) to enforce strict origin header checks and validate request authenticity for all traffic hitting the HTTP operator endpoints.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is limited to specific deployment configurations where a trusted proxy is utilized, which partially mitigates the attack surface in standard installations.

Analyst Recommendation

The vulnerability presents a credible risk for organizations utilizing trusted-proxy configurations, as it allows for unauthorized manipulation of the application state. Security teams should prioritize updating the OpenClaw software to version 2026.3.31 to ensure that origin validation is correctly enforced. Immediate patching is the most effective way to eliminate this risk and prevent potential exploitation of the HTTP operator endpoints.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.3.28
CONFIDENCE: high
MISSING: none
CREDITS: Nathan (@nexrin) (reporter); KeenSecurityLab (finder)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-3cw3-5vxw-g2h3","name":"GitHub Security Advisory (GHSA-3cw3-5vxw-g2h3)","tags":["vendor-advisory"]},{"url":"https://www.vulncheck.com/advisories/openclaw-unauthenticated-discovery-endpoint-credential-exfiltration-via-remote-onboarding","name":"VulnCheck Advisory: OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboard","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
An authentication bypass vulnerability in OpenClaw allows unauthenticated attackers to spoof discovery endpoints, redirecting traffic and capturing credentials during the remote onboarding process.

Executive Summary:
OpenClaw is vulnerable to an authentication bypass flaw that permits unauthenticated attackers to intercept sensitive onboarding traffic and credentials.

Vulnerability Details

CVE-ID: CVE-2026-41342

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.3.28

Vulnerability: This is an origin validation error (CWE-346) located in the remote onboarding component. It allows unauthenticated remote attackers to manipulate discovery endpoints without explicit trust, leading to credential exfiltration.

Business Impact

Successful exploitation poses a significant risk to organizational security, as it allows for the theft of gateway credentials and the interception of sensitive network traffic. With a CVSS score of 7.3, this high-severity vulnerability could lead to unauthorized network access and potential lateral movement within the environment.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to resolve the origin validation flaw.

Proactive Monitoring: Review network access logs for unusual discovery requests or connections to unauthorized gateways during the onboarding process.

Compensating Controls: Implement strict network segmentation and ensure that onboarding traffic is restricted to known, trusted gateways via firewall rules.

Exploitation Status

Public Exploit Available: No.

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its ability to facilitate man-in-the-middle attacks during the critical onboarding phase.

Analyst Recommendation

Given the potential for credential theft and traffic interception, this vulnerability presents a serious security risk to the integrity of onboarding workflows. IT and security teams should prioritize upgrading to version 2026.3.28 immediately to eliminate the attack vector and ensure secure gateway communications.

---METADATA---
VENDOR: Lenovo
PRODUCT: Software Fix
AFFECTED_VERSIONS: 0 up to (excluding) 7.5.5.19
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://support.lenovo.com/us/en/product_security/LEN-213829","name":null,"tags":[]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:40.703Z
---END_METADATA---

Description Summary:
Lenovo Software Fix contains an uncontrolled search path element vulnerability that allows a local authenticated user to execute code with elevated privileges during the installation process.

Executive Summary:
A local privilege escalation vulnerability in Lenovo Software Fix could allow authenticated users to execute arbitrary code with elevated permissions.

Vulnerability Details

CVE-ID: CVE-2026-4134

Affected Software: Lenovo Software Fix

Affected Versions: 0 up to (excluding) 7.5.5.19

Vulnerability: This vulnerability is caused by an uncontrolled search path element (CWE-427), which allows a local attacker who has already authenticated to the system to manipulate the installation process and achieve elevated execution privileges.

Business Impact

The ability for a local user to escalate privileges poses a significant risk to system integrity and confidentiality. With a CVSS score of 7.3, this flaw is categorized as High severity, as it facilitates unauthorized control over the affected machine, potentially leading to total system compromise if the attacker gains administrative access.

Remediation Plan

Immediate Action: Update Lenovo Software Fix to version 7.5.5.19 or later as specified in the official vendor security advisory.

Proactive Monitoring: Monitor system logs for unusual installation activity or processes executing from unexpected directories during software updates.

Compensating Controls: Ensure that standard users have restricted permissions on the local machine to prevent unauthorized modification of search paths or execution of installer binaries.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires local access and specific conditions during the installation sequence, which limits the attack surface to users already present on the system.

Analyst Recommendation

Given the potential for privilege escalation and the high severity score, administrators should prioritize updating Lenovo Software Fix across all managed endpoints. Applying the patch to version 7.5.5.19 is the only effective way to remediate the uncontrolled search path vulnerability and prevent local attackers from gaining unauthorized administrative control.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to 2026.3.31
CONFIDENCE: high
MISSING: none
CREDITS: Nathan (@nexrin) (reporter); KeenSecurityLab (finder)
SOURCES_JSON: [{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-3qpv-xf3v-mm45","name":"GitHub Security Advisory (GHSA-3qpv-xf3v-mm45)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/330a9f98cb29c79b1c16a2117e03d6276a0d6289","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-arbitrary-hook-code-execution-via-openclaw-bundled-hooks-dir-environment-variable-override","name":"VulnCheck Advisory: OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Vari","tags":["third-party-advisory"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
OpenClaw versions before 2026.3.31 are vulnerable to arbitrary code execution due to improper handling of the OPENCLAW_BUNDLED_HOOKS_DIR environment variable via workspace .env files.

Executive Summary:
A critical vulnerability in OpenClaw allows local attackers to achieve arbitrary code execution by overriding environment variables through workspace configuration files.

Vulnerability Details

CVE-ID: CVE-2026-41336

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to 2026.3.31

Vulnerability: This flaw involves the inclusion of functionality from an untrusted control sphere (CWE-829), where workspace .env files can override the OPENCLAW_BUNDLED_HOOKS_DIR variable. This allows unauthenticated, local attackers to force the application to load malicious hook code instead of trusted defaults.

Business Impact

The ability to execute arbitrary code on the host system presents a severe security risk, potentially leading to a full system compromise, unauthorized data access, and lateral movement within the network. Although the attack requires local access, the CVSS score of 7.8 reflects the high impact on confidentiality, integrity, and availability once the attacker successfully triggers the malicious hook execution.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later to ensure the environment variable override is properly restricted.

Proactive Monitoring: Review access logs and workspace configurations for unauthorized changes to .env files or unexpected modifications to environment variables in the deployment environment.

Compensating Controls: Implement strict file system permissions to prevent untrusted users from creating or modifying workspace-specific configuration files that could influence the application environment.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable if an attacker can convince a user to load an untrusted workspace containing a malicious .env file.

Analyst Recommendation

This vulnerability represents a significant risk to systems utilizing OpenClaw by allowing local privilege escalation through configuration manipulation. Security teams must prioritize updating the software to version 2026.3.31 immediately to prevent potential exploitation of the hook loading mechanism.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Before 2026.3.31
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
A sandbox bypass vulnerability in OpenClaw before 2026.3.31 allows attackers to escalate privileges by manipulating heartbeat context inheritance and the senderIsOwner parameter.

Executive Summary:
A critical sandbox bypass vulnerability in OpenClaw allows attackers to escalate privileges, potentially leading to full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-41329

Affected Software: OpenClaw

Affected Versions: Before 2026.3.31

Vulnerability: This vulnerability involves improper context validation within the OpenClaw sandbox. By manipulating the heartbeat context inheritance and the senderIsOwner parameter, an attacker can bypass sandbox restrictions to achieve unauthorized privilege escalation.

Business Impact

The severity of this vulnerability is underscored by its 9.9 CVSS score, indicating a nearly maximal risk to system security. Successful exploitation grants an attacker elevated privileges, which could result in complete host compromise, data theft, and the disruption of critical business services.

Remediation Plan

Immediate Action: Upgrade all instances of OpenClaw to version 2026.3.31 or later immediately.

Proactive Monitoring: Review system logs for unusual heartbeat signals or repeated attempts to manipulate context parameters that may indicate exploitation efforts.

Compensating Controls: Ensure the application is running within a containerized environment with hardened kernel-level protections to limit the impact of a sandbox breakout.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this privilege escalation vulnerability, immediate patching is required. Administrators should verify that all deployments are updated to version 2026.3.31 to effectively close the sandbox bypass vector.

---METADATA---
VENDOR: Dgraph
PRODUCT: Dgraph
AFFECTED_VERSIONS: Prior to 25.3.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An unauthenticated DQL injection vulnerability in Dgraph's default configuration allows attackers to read all database contents via crafted mutation requests.

Executive Summary:
A critical DQL injection vulnerability in Dgraph allows unauthenticated attackers to bypass security controls and gain full read access to the entire database.

Vulnerability Details

CVE-ID: CVE-2026-41328

Affected Software: Dgraph

Affected Versions: Prior to 25.3.3

Vulnerability: The vulnerability stems from improper sanitization of the Lang value in DQL mutations. By sending specifically crafted HTTP POST requests to the /alter and /mutate endpoints, an unauthenticated attacker can inject arbitrary query logic, effectively bypassing ACL restrictions in default configurations.

Business Impact

With a CVSS score of 9.1, this vulnerability allows for total compromise of database confidentiality. An attacker can exfiltrate all stored records, posing an existential threat to data privacy and regulatory compliance.

Remediation Plan

Immediate Action: Upgrade Dgraph to version 25.3.3 or later to ensure proper sanitization of DQL inputs.

Proactive Monitoring: Review audit logs for suspicious activity on the /alter and /mutate endpoints and investigate any unexpected DQL query structures.

Compensating Controls: Enable Access Control Lists (ACLs) if they are not already active, and restrict network access to the Dgraph API ports to authorized application servers only.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a severe vulnerability that grants full read access to the database without authentication. It is critical to apply the provided patch immediately and verify that ACLs are properly configured to add a layer of defense-in-depth.

---METADATA---
VENDOR: Dgraph
PRODUCT: Dgraph
AFFECTED_VERSIONS: Prior to 25.3.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Dgraph is vulnerable to an unauthenticated DQL injection attack that allows full read access to database data via crafted HTTP POST requests.

Executive Summary:
A critical DQL injection vulnerability in Dgraph allows unauthenticated attackers to gain full read access to sensitive database contents.

Vulnerability Details

CVE-ID: CVE-2026-41327

Affected Software: Dgraph Dgraph

Affected Versions: Prior to 25.3.3

Vulnerability: This vulnerability involves improper input sanitization within the DQL query parser, where an unauthenticated attacker can inject arbitrary query blocks into the cond field of an upsert mutation. The lack of parameterization allows the injected query to execute server-side and return sensitive data in the HTTP response.

Business Impact

The ability for an unauthenticated user to retrieve the entire contents of a database represents a catastrophic security failure. Given the CVSS score of 9.1, this vulnerability poses an extreme risk of mass data exfiltration, regulatory non-compliance, and severe reputational damage to any organization utilizing Dgraph in its default configuration.

Remediation Plan

Immediate Action: Upgrade all Dgraph instances to version 25.3.3 or later immediately to resolve the query injection flaw.

Proactive Monitoring: Review access logs for suspicious HTTP POST requests directed to the /mutate endpoint, specifically looking for anomalous cond field values.

Compensating Controls: Implement strict network access controls to limit access to the Dgraph API and ensure that Access Control Lists (ACLs) are enabled and configured to prevent unauthorized operations.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Apr 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability cannot be overstated, as it provides an unauthenticated path to total data exposure. Organizations must prioritize upgrading their Dgraph installations to version 25.3.3 immediately and audit their current configuration to ensure ACLs are properly enforced.

---METADATA---
VENDOR: patrickjuchli
PRODUCT: basic-ftp
AFFECTED_VERSIONS: < 5.3.0
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-rp42-5vxx-qpwr","name":"https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-rp42-5vxx-qpwr","tags":["x_refsource_CONFIRM"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
The basic-ftp Node.js client is vulnerable to a denial of service via unbounded memory growth when processing directory listings, potentially causing the client process to crash.

Executive Summary:
The basic-ftp library contains a critical resource consumption vulnerability that allows an unauthenticated remote FTP server to crash the client application via memory exhaustion.

Vulnerability Details

CVE-ID: CVE-2026-41324

Affected Software: patrickjuchli basic-ftp

Affected Versions: < 5.3.0

Vulnerability: This is a resource consumption flaw (CWE-400) occurring within the Client.list() function. An unauthenticated remote FTP server can trigger the vulnerability by providing an maliciously crafted or infinite directory listing response, causing the client process to consume memory until failure.

Business Impact

Successful exploitation of this vulnerability leads to a denial of service, which can cause significant operational disruption for applications relying on the basic-ftp client for data transfers. With a CVSS score of 7.5, this issue represents a high risk to availability, as it allows external, untrusted sources to force service instability.

Remediation Plan

Immediate Action: Update the basic-ftp package to version 5.3.0 or later to implement necessary memory limits during directory listing operations.

Proactive Monitoring: Monitor server memory usage and process logs for unexpected spikes or crashes occurring during FTP client-server interactions.

Compensating Controls: If immediate patching is not possible, implement stricter validation on connections to external FTP servers and utilize resource quotas at the container or process level to mitigate the impact of memory exhaustion.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of April 25, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently exploitable because it requires no authentication to trigger the malicious response from a remote server.

Analyst Recommendation

Given the ease of exploitation and the potential for service disruption, administrators should prioritize updating to version 5.3.0. This patch effectively remediates the resource consumption flaw by introducing necessary limits, thereby protecting the application from memory-based denial of service attacks originating from compromised or malicious FTP servers.

---METADATA---
VENDOR: Kyverno
PRODUCT: Kyverno
AFFECTED_VERSIONS: < 1.16.4, >= 1.17.0-rc1, < 1.17.2-rc1
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4","name":"https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/kyverno/kyverno/commit/bc4f91c4801b1eaa2edc0a14e2f1b0af8cf0c1f5","name":"https://github.com/kyverno/kyverno/commit/bc4f91c4801b1eaa2edc0a14e2f1b0af8cf0c1f5","tags":["x_refsource_MISC"]},{"url":"https://github.com/kyverno/kyverno/commit/c2eab00033e635bda4e4efb58c1b472b41728bb6","name":"https://github.com/kyverno/kyverno/commit/c2eab00033e635bda4e4efb58c1b472b41728bb6","tags":["x_refsource_MISC"]},{"url":"https://github.com/kyverno/kyverno/commit/f70e8ac1e7acd2e3844f9553e4a884f07f953de0","name":"https://github.com/kyverno/kyverno/commit/f70e8ac1e7acd2e3844f9553e4a884f07f953de0","tags":["x_refsource_MISC"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
Kyverno contains an SSRF vulnerability in the apiCall feature where the admission controller service account token is leaked to unauthorized servers, potentially leading to full cluster compromise.

Executive Summary:
A critical security flaw in Kyverno allows authenticated users to leak sensitive service account tokens via SSRF, resulting in a risk of full Kubernetes cluster compromise.

Vulnerability Details

CVE-ID: CVE-2026-41323

Affected Software: Kyverno Kyverno

Affected Versions: < 1.16.4, 1.17.0-rc1 to < 1.17.2-rc1

Vulnerability: This vulnerability involves a combination of Server-Side Request Forgery (CWE-918) and sensitive information exposure (CWE-200). An authenticated user with sufficient permissions to define a ClusterPolicy can trigger outgoing HTTP requests to attacker-controlled endpoints, causing the admission controller to automatically leak its ServiceAccount token.

Business Impact

The exploitation of this vulnerability poses a severe threat to containerized environments. Because the leaked ServiceAccount token possesses high-level permissions, including the ability to patch webhook configurations, an attacker could escalate privileges to achieve full control over the Kubernetes cluster. With a CVSS score of 8.1, this represents a High severity risk that could lead to unauthorized data access, lateral movement, and total system compromise.

Remediation Plan

Immediate Action: Upgrade to version 1.16.4, 1.17.2-rc1, or 1.18.0-rc1 immediately to include the necessary service URL validation logic.

Proactive Monitoring: Review cluster audit logs for unusual egress traffic originating from the Kyverno admission controller pod to unknown or external IP addresses.

Compensating Controls: Implement network policies that restrict the egress traffic of the Kyverno admission controller namespace to prevent unauthorized connections to external servers.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 25, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly dangerous due to the automatic nature of the token exposure once an attacker creates a malicious ClusterPolicy.

Analyst Recommendation

Given the potential for full cluster compromise, organizations utilizing Kyverno must prioritize this update. Administrators should verify their current deployment version and apply the vendor-provided patches as soon as possible to prevent the exposure of sensitive admission controller tokens.

---METADATA---
VENDOR: Zinoui
PRODUCT: HTTP Headers (WordPress Plugin)
AFFECTED_VERSIONS: 0 through 1.19.2
CONFIDENCE: high
MISSING: none
CREDITS: Chiao-Lin Yu (finder)
SOURCES_JSON: [{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce010c6f-16bd-4178-a621-31ba6378946a?source=cve","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/http-headers/trunk/http-headers.php#L1403","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/http-headers/tags/1.19.2/http-headers.php#L1403","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/http-headers/trunk/http-headers.php#L1298","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/http-headers/tags/1.19.2/http-headers.php#L1298","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/http-headers/trunk/http-headers.php#L1296","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/http-headers/tags/1.19.2/http-headers.php#L1296","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/http-headers/trunk/http-headers.php#L97","name":null,"tags":[]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.563Z
---END_METADATA---

Description Summary:
The HTTP Headers plugin for WordPress is vulnerable to path traversal and arbitrary file write, allowing authenticated administrators to achieve remote code execution via unsanitized input fields.

Executive Summary:
The Zinoui HTTP Headers plugin for WordPress contains a critical path traversal flaw that allows authenticated administrators to execute arbitrary code on the underlying server.

Vulnerability Details

CVE-ID: CVE-2026-4132

Affected Software: Zinoui HTTP Headers

Affected Versions: 0 through 1.19.2

Vulnerability: The plugin fails to sanitize user-supplied input for the 'hh_htpasswd_path' and 'hh_www_authenticate_user' options. This allows an attacker with Administrator privileges to write arbitrary content, including malicious PHP code, to any location on the server filesystem.

Business Impact

Successful exploitation of this vulnerability leads to full system compromise, as it allows for arbitrary remote code execution. Given the CVSS score of 7.2, this vulnerability represents a high risk for organizations using this plugin, as it could result in total unauthorized control over the web server, data exfiltration, or lateral movement within the network.

Remediation Plan

Immediate Action: Update the HTTP Headers plugin to the latest available version as specified by the vendor. If an update is not immediately available, disable or remove the plugin until a patch is applied.

Proactive Monitoring: Monitor server access logs for suspicious file creation events or attempts to modify sensitive configuration files. Review WordPress administrative action logs for unusual changes to plugin settings.

Compensating Controls: Implement a Web Application Firewall (WAF) to detect and block malicious payloads directed at administrative endpoints. Ensure that the web server process runs with the least privilege necessary to limit the impact of potential code execution.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 24, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability requires administrative access, the ability to write arbitrary files to the server provides a direct path to full system compromise.

Analyst Recommendation

The risk posed by this vulnerability is significant due to the potential for remote code execution. Organizations should prioritize updating the Zinoui HTTP Headers plugin immediately to mitigate the risk of exploitation. If the plugin is not essential to business operations, it should be removed to reduce the overall attack surface of the WordPress environment.

---METADATA---
VENDOR: RubyGems
PRODUCT: ERB
AFFECTED_VERSIONS: < 4.0.3.1, = 4.0.4, >= 5.0.0, < 6.0.1.1, >= 6.0.2, < 6.0.4
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv","name":"https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv","tags":["x_refsource_CONFIRM"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.539Z
---END_METADATA---

Description Summary:
A deserialization vulnerability in the Ruby ERB templating system allows unauthenticated attackers to achieve remote code execution by bypassing existing security guards via specific public methods.

Executive Summary:
A critical deserialization flaw in the Ruby ERB library allows unauthenticated attackers to achieve remote code execution, posing a severe risk to application integrity.

Vulnerability Details

CVE-ID: CVE-2026-41316

Affected Software: RubyGems ERB

Affected Versions: < 4.0.3.1, = 4.0.4, >= 5.0.0, < 6.0.1.1, >= 6.0.2, < 6.0.4

Vulnerability: The vulnerability stems from a protection mechanism failure where specific public methods, including ERB#def_method, ERB#def_module, and ERB#def_class, fail to implement the @_init instance variable guard present in other methods. An unauthenticated attacker can exploit this by triggering Marshal.load on untrusted data, using these methods as a sink for arbitrary code execution.

Business Impact

This vulnerability carries a CVSS score of 8.1, reflecting its potential for total compromise of the affected application. Successful exploitation allows for remote code execution, which may lead to full system takeover, unauthorized data access, and significant reputational damage to the organization.

Remediation Plan

Immediate Action: Update the Ruby ERB gem to version 4.0.3.1, 4.0.4.1, 6.0.1.1, or 6.0.4, depending on the current environment branch.

Proactive Monitoring: Review application logs for suspicious deserialization activity or unexpected calls to Marshal.load involving untrusted user input.

Compensating Controls: Implement strict input validation and avoid passing untrusted data to Marshal.load functions. Utilize language-level security policies to restrict dangerous method calls if patching cannot be performed immediately.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is highly dangerous, the requirement for an attacker to trigger Marshal.load on untrusted data limits the attack surface to applications that perform unsafe deserialization.

Analyst Recommendation

Given the high impact of remote code execution, organizations should prioritize updating the ERB library across all affected Ruby environments. Security teams must verify their dependency trees to identify vulnerable versions and ensure that patches are applied to stabilize the application infrastructure immediately.

---METADATA---
VENDOR: harttle
PRODUCT: liquidjs
AFFECTED_VERSIONS: < 10.25.7
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/harttle/liquidjs/security/advisories/GHSA-4rc3-7j7w-m548","name":"https://github.com/harttle/liquidjs/security/advisories/GHSA-4rc3-7j7w-m548","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/harttle/liquidjs/commit/e2311dfd6e82f73509308aa8a3a1fafc92e226f0","name":"https://github.com/harttle/liquidjs/commit/e2311dfd6e82f73509308aa8a3a1fafc92e226f0","tags":["x_refsource_MISC"]},{"url":"https://github.com/harttle/liquidjs/releases/tag/v10.25.7","name":"https://github.com/harttle/liquidjs/releases/tag/v10.25.7","tags":["x_refsource_MISC"]}]
PROFILE: daily@50ba49e8b7aa
MODEL: gemini-3.5-flash-lite
GENERATED: 2026-08-29T11:24:05.298Z
---END_METADATA---

Description Summary:
A denial of service vulnerability in LiquidJS prior to version 10.25.7 allows unauthenticated users to crash the Node.js process via uncontrolled recursion.

Executive Summary:
An uncontrolled recursion vulnerability in the LiquidJS template engine allows unauthenticated attackers to cause a denial of service by exhausting available memory.

Vulnerability Details

CVE-ID: CVE-2026-41311

Affected Software: harttle liquidjs

Affected Versions: < 10.25.7

Vulnerability: This flaw stems from uncontrolled recursion (CWE-674) triggered by a circular block reference in layout and block tags, allowing any user who can submit a template to execute the attack without authentication.

Business Impact

A successful exploitation of this vulnerability results in complete application downtime, as the Node.js process crashes due to a heap out of memory error. This causes service disruption for all users relying on the affected template engine. The CVSS score of 7.5 reflects the high availability impact and ease of remote exploitation.

Remediation Plan

Immediate Action: Update the liquidjs package to version 10.25.7 or later via npm.

Proactive Monitoring: Monitor server resource utilization, particularly heap memory consumption and Node.js process termination events.

Compensating Controls: Implement input validation or rate limiting on template submissions to prevent untrusted users from supplying deeply nested or circular block references.

Exploitation Status

Public Exploit Available: No - explicit exploit references or weaponized modules are absent, though a proof-of-concept assessment exists.

Analyst Notes: As of May 10, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw's inherent design allows low-complexity remote triggers against unpatched instances.

Analyst Recommendation

Given the severity of potential denial of service attacks, administrators must apply the security update to version 10.25.7 immediately. Upgrading the template engine neutralizes the recursion vector and restores stability to the application environment.

---METADATA---
VENDOR: Open Source Social Network
PRODUCT: Open Source Social Network (OSSN)
AFFECTED_VERSIONS: < 9.0
CONFIDENCE: high
MISSING: none
SOURCES_JSON: [{"url":"https://github.com/opensource-socialnetwork/opensource-socialnetwork/security/advisories/GHSA-72qf-xrcw-fhr2","name":"https://github.com/opensource-socialnetwork/opensource-socialnetwork/security/advisories/GHSA-72qf-xrcw-fhr2","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/opensource-socialnetwork/opensource-socialnetwork/issues/2535","name":"https://github.com/opensource-socialnetwork/opensource-socialnetwork/issues/2535","tags":["x_refsource_MISC"]},{"url":"https://github.com/opensource-socialnetwork/opensource-socialnetwork/commit/12357113b3be189da7f6e429979a464e4f982117","name":"https://github.com/opensource-socialnetwork/opensource-socialnetwork/commit/12357113b3be189da7f6e429979a464e4f982117","tags":["x_refsource_MISC"]}]
PROFILE: batch@eb21ac00f78b
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-29T13:56:38.543Z
---END_METADATA---

Description Summary:
Open Source Social Network (OSSN) versions prior to 9.0 are vulnerable to a resource exhaustion attack, allowing unauthenticated attackers to trigger a Denial of Service condition via crafted images.

Executive Summary:
A critical resource exhaustion vulnerability in Open Source Social Network (OSSN) allows unauthenticated attackers to cause service disruption through memory and CPU depletion.

Vulnerability Details

CVE-ID: CVE-2026-41309

Affected Software: Open Source Social Network (OSSN)

Affected Versions: < 9.0

Vulnerability: The application fails to properly validate image dimensions during processing, allowing an unauthenticated attacker to upload a specially crafted image that forces the server to allocate excessive memory and CPU resources.

Business Impact

Successful exploitation of this vulnerability results in a Denial of Service (DoS) condition, which renders the social networking platform unavailable to legitimate users. Given the CVSS score of 8.2, this flaw poses a high risk to business continuity and operational uptime, as the attack vector is network-based and requires no authentication.

Remediation Plan

Immediate Action: Upgrade to Open Source Social Network (OSSN) version 9.0 or later, which implements strict image dimension validation and improved resource management.

Proactive Monitoring: Monitor server resource utilization, specifically memory and CPU spikes, and review web access logs for frequent or suspicious image upload requests originating from the same source.

Compensating Controls: If an immediate upgrade is not feasible, restrict the memory_limit and max_execution_time in php.ini and implement server-side validation to reject images exceeding reasonable pixel dimensions.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable because it relies on standard image processing workflows that lack necessary input constraints.

Analyst Recommendation

This vulnerability represents a significant threat to platform stability due to the ease with which an unauthenticated attacker can trigger a denial of service. Administrators must prioritize updating to version 9.0 to ensure robust protection against resource exhaustion attacks. Until the patch is applied, implementing the suggested configuration changes is essential to maintain service availability.