Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw unpaired device identity can bypass operator pairing and self-assign operator scopes with shared auth CVE-2026-32042, GHSA-553v-f69r-656j | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files CVE-2026-32008, GHSA-45cg-2683-gfmq | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw Windows Scheduled Task script generation allowed local command injection via unsafe cmd argument handling CVE-2026-31994, GHSA-mqr9-vqhq-3jxw | High | 0.6% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Experimental apply_patch may bypass workspace-only checks in opt-in sandbox mounts (off by default) CVE-2026-32007, GHSA-h9xm-j4qg-fvpg | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw: MS Teams fileConsent/invoke missing conversation binding allowed cross-conversation pending-upload consumption GHSA-j26j-7qc4-3mrf | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's owner-only gateway tool access checks were incomplete in specific authenticated DM flows GHSA-2hm8-rqrm-xfjq | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: shell-env trusted-prefix fallback allowed attacker-controlled binary execution via $SHELL CVE-2026-22217, GHSA-p4wh-cr8m-gm6c | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback) CVE-2026-32896, GHSA-5mx2-2mgw-x8rm | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation) GHSA-2mc2-g238-722j | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`) CVE-2026-32009, GHSA-5gj7-jf77-q2q2 | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw skills-install-download: tar.bz2 extraction bypassed archive safety parity checks (local DoS) CVE-2026-32044, GHSA-77hf-7fqf-f227 | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Discord voice transcript owner-flag omission could expose owner-only tools in mixed-trust channels CVE-2026-32035, GHSA-wpg9-4g4v-f9rc | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization GHSA-474h-prjg-mmw3 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has encoded-path auth bypass in plugin `/api/channels` route classification CVE-2026-32004, GHSA-v865-p3gq-hw6m | High | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Discord DM reaction ingress missed dmPolicy/allowFrom checks in restricted setups CVE-2026-32028, GHSA-354r-7mfh-7rh2 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw: ZIP extraction race could write outside destination via parent symlink rebind CVE-2026-27670, CVE-2026-28483, GHSA-r54r-wmmq-mh84 | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Unified root-bound write hardening for browser output and related path-boundary flows CVE-2026-22180, GHSA-3pxq-f3cp-jmxp | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's web tools strict URL guard could lose DNS pinning when env proxy is configured CVE-2026-22181, GHSA-8mvx-p2r9-r375 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts CVE-2026-29608, GHSA-h3rm-6x7g-882f | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Node camera URL payload host-binding bypass allowed gateway fetch pivots GHSA-2858-xg23-26fp | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has pre-auth webhook body parsing that can enable unauthenticated slow-request DoS CVE-2026-32011, GHSA-x4vp-4235-65hg | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace CVE-2026-31990, GHSA-cfvj-7rx7-fc7c | High | 0.1% | 03 Mar, 2026 | npm openclaw |
MCP NMAP Server has an Injection vulnerability CVE-2026-3484, GHSA-xc68-rrqc-qgq3 | Medium | 3.3% | 03 Mar, 2026 | npm mcp-nmap-server |
Ghost Vulnerable to Remote Code Execution via Malicious Themes BIT-ghost-2026-29053, CVE-2026-29053, GHSA-cgc2-rcrh-qr5x | Critical | 4.9% | 03 Mar, 2026 | npm ghost |
OpenClaw vulnerable to sensitive file disclosure via stageSandboxMedia CVE-2026-32030, GHSA-x9cf-3w63-rpq9 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw vulnerable to arbitrary file read via $include directive CVE-2026-32061, GHSA-56pc-6hvp-4gv4 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's system.run allowlist bypass via shell line-continuation command substitution CVE-2026-28460, GHSA-9868-vxmx-w862 | Medium | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw's config env vars allowed startup env injection into service runtime CVE-2026-22177, GHSA-8fmp-37rc-p5g7 | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's shell env fallback trusts unvalidated SHELL path from host environment CVE-2026-32032, GHSA-f8mp-vj46-cq8v | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's tools.exec.safeBins trusted PATH directories allowed binary shadowing in allowlist mode GHSA-qhrr-grqp-6x2g | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's Slack reaction/pin sender-policy consistency issue in non-message ingress CVE-2026-32899, GHSA-rm2p-j3r7-4x4j | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text CVE-2026-32052, GHSA-6rcp-vxwf-3mfp | Medium | 1.0% | 03 Mar, 2026 | npm openclaw |
OpenClaw's system.run approval TOCTOU via mutable symlink cwd target on node host CVE-2026-32043, GHSA-mwcg-wfq3-4gjc | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's andbox browser noVNC observer lacked VNC authentication CVE-2026-32064, GHSA-25gx-x37c-7pph | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw DM pairing-store identities could satisfy group allowlist authorization CVE-2026-32027, GHSA-jv6r-27ww-4gw4 | High | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode CVE-2026-32023, GHSA-ccg8-46r6-9qgj | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse CVE-2026-32053, GHSA-vqx8-9xxw-f2m7 | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass) CVE-2026-32022, GHSA-3xfw-4pmr-4xc5 | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check GHSA-h656-5vcf-cm23 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs GHSA-9f72-qcpw-2hxc | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints CVE-2026-22169, GHSA-vmqr-rc7x-3446 | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw has gateway plugin auth bypass via encoded dot-segment traversal in protected /api/channels paths CVE-2026-32036, GHSA-mwxv-35wr-4vvj | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes CVE-2026-32045, GHSA-hff7-ccv5-52f8 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir() CVE-2026-22171, GHSA-vj3g-5px3-gr46 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation CVE-2026-32040, GHSA-2ww6-868g-2c56 | Low | 0.2% | 03 Mar, 2026 | npm openclaw |
DOMPurify contains a Cross-site Scripting vulnerability CVE-2026-0540, GHSA-v2wj-7wpq-c8vv | Medium | 0.4% | 03 Mar, 2026 | npm dompurify |
DOMPurify contains a Cross-site Scripting vulnerability CVE-2025-15599, GHSA-v8jm-5vwx-cfxm | Medium | 0.3% | 03 Mar, 2026 | npm dompurify |
Temporary path handling could write outside OpenClaw temp boundary CVE-2026-32026, GHSA-33hm-cq8r-wc49 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Chrome --no-sandbox disabled OS-level browser sandbox in sandbox browser container CVE-2026-32046, GHSA-43x4-g22p-3hrq | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists CVE-2026-32037, GHSA-w76h-8m22-hpgh | High | 0.2% | 03 Mar, 2026 | npm openclaw |