Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw unpaired device identity can bypass operator pairing and self-assign operator scopes with shared auth CVE-2026-32042, GHSA-553v-f69r-656j | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files CVE-2026-32008, GHSA-45cg-2683-gfmq | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw Windows Scheduled Task script generation allowed local command injection via unsafe cmd argument handling CVE-2026-31994, GHSA-mqr9-vqhq-3jxw | High | 0.6% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Experimental apply_patch may bypass workspace-only checks in opt-in sandbox mounts (off by default) CVE-2026-32007, GHSA-h9xm-j4qg-fvpg | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`) CVE-2026-32009, GHSA-5gj7-jf77-q2q2 | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization GHSA-474h-prjg-mmw3 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has encoded-path auth bypass in plugin `/api/channels` route classification CVE-2026-32004, GHSA-v865-p3gq-hw6m | High | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: ZIP extraction race could write outside destination via parent symlink rebind CVE-2026-27670, CVE-2026-28483, GHSA-r54r-wmmq-mh84 | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw has pre-auth webhook body parsing that can enable unauthenticated slow-request DoS CVE-2026-32011, GHSA-x4vp-4235-65hg | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace CVE-2026-31990, GHSA-cfvj-7rx7-fc7c | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw vulnerable to sensitive file disclosure via stageSandboxMedia CVE-2026-32030, GHSA-x9cf-3w63-rpq9 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's shell env fallback trusts unvalidated SHELL path from host environment CVE-2026-32032, GHSA-f8mp-vj46-cq8v | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's andbox browser noVNC observer lacked VNC authentication CVE-2026-32064, GHSA-25gx-x37c-7pph | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw DM pairing-store identities could satisfy group allowlist authorization CVE-2026-32027, GHSA-jv6r-27ww-4gw4 | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs GHSA-9f72-qcpw-2hxc | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints CVE-2026-22169, GHSA-vmqr-rc7x-3446 | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw has gateway plugin auth bypass via encoded dot-segment traversal in protected /api/channels paths CVE-2026-32036, GHSA-mwxv-35wr-4vvj | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes CVE-2026-32045, GHSA-hff7-ccv5-52f8 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir() CVE-2026-22171, GHSA-vj3g-5px3-gr46 | High | 0.3% | 03 Mar, 2026 | npm openclaw |
Temporary path handling could write outside OpenClaw temp boundary CVE-2026-32026, GHSA-33hm-cq8r-wc49 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists CVE-2026-32037, GHSA-w76h-8m22-hpgh | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading CVE-2026-28393, GHSA-7xhj-55q9-pc3m | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw has command injection via Windows shell fallback in Lobster tool execution CVE-2026-32000, GHSA-7fcc-cw49-xm78 | High | 0.6% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection GHSA-qj22-xqjr-v83v | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has allowlist exec-guard bypass via env -S CVE-2026-31992, GHSA-48wf-g7cp-gr3m | High | 0.3% | 03 Mar, 2026 | npm openclaw |
Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack CVE-2026-27601, GHSA-qpx9-hpmf-5gmw | High | 1.1% | 03 Mar, 2026 | npm underscore |
OpenClaw: macOS optional allowlist basename matching could bypass path-based policy CVE-2026-32016, GHSA-7f4q-9rqh-x36p | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE) CVE-2026-32003, GHSA-2fgq-7j6h-9rm4 | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Node reconnect metadata spoofing could bypass platform-based node command policy CVE-2026-32014, GHSA-r65x-2hqr-j5hf | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Node system.run approval bypass via parent-symlink cwd rebind CVE-2026-27545, GHSA-f7ww-2725-qvw2 | High | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset CVE-2026-27522, GHSA-fqcm-97m6-w7rm | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval GHSA-943q-mwmv-hhvh | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw has non-constant-time token comparison in hooks authentication CVE-2026-28464, GHSA-jmm5-fvh5-gf4p | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Zip Slip path traversal in tar archive extraction CVE-2026-28453, GHSA-p25h-9q54-ffvw | High | 0.5% | 02 Mar, 2026 | npm openclaw |
OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure CVE-2026-32062, GHSA-mfg5-7q5g-f37j | High | 0.4% | 02 Mar, 2026 | npm @openclaw/voice-call npm openclaw |
OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels CVE-2026-32049, GHSA-rxxp-482v-7mrh | High | 0.6% | 02 Mar, 2026 | npm openclaw |
OpenClaw Canvas Path Traversal Information Disclosure Vulnerability CVE-2026-3689, GHSA-jq4x-98m3-ggq6 | High | 0.9% | 02 Mar, 2026 | npm openclaw |
OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c) CVE-2026-22175, GHSA-gwqp-86q6-w47g | High | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution CVE-2026-29607, GHSA-6j27-pc5c-m8w8 | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Windows system.run approval mismatch on cmd.exe /c trailing arguments CVE-2026-22168, GHSA-5v6x-rfc3-7qfr | High | 0.4% | 02 Mar, 2026 | npm openclaw |
@keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script GHSA-8986-v76q-8vr2 | High | Not scored | 02 Mar, 2026 | npm @keep-network/tbtc-v2 |
OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind CVE-2026-31997, GHSA-q399-23r3-hfx4 | High | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw has web_search citation redirect SSRF via private-network-allowing policy CVE-2026-31989, GHSA-g99v-8hwm-g76g | High | 0.2% | 02 Mar, 2026 | npm openclaw |
OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools CVE-2026-32051, GHSA-jr6x-2q95-fh2g | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Sandbox media TOCTOU could read files outside sandbox root GHSA-7xmq-g46g-f8pv | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries GHSA-x82f-27x3-q89c | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns CVE-2026-32048, GHSA-p7gr-f84w-hqg5 | High | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw has unbounded memory growth in Zalo webhook via query-string key churn (unauthenticated DoS) CVE-2026-28461, CVE-2026-32066, GHSA-wr6m-jg37-68xh | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Browser control startup could continue unauthenticated after auth bootstrap failure CVE-2026-32041, GHSA-vpj2-69hf-rppw | High | 0.1% | 02 Mar, 2026 | npm openclaw |
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() GHSA-5c6j-r48x-rmvq | High | Not scored | 28 Feb, 2026 | npm serialize-javascript |