Advisory Catalog

OpenClaw has a path traversal in browser trace/download output paths may allow arbitrary file writes

NVIDIA NeMo Framework Deserializes Untrusted Data

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution

OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway

OpenClaw's unsanitized session ID enables path traversal in transcript file operations

Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction

OpenClaw inter-session prompts could be treated as direct user instructions

OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides)

OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting

OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints

OpenClaw affected by denial of service via unbounded webhook request body buffering

OpenClaw affected by denial of service via unbounded URL-backed media fetch

OpenClaw Slack: dmPolicy=open allowed any DM sender to run privileged slash commands

OpenClaw exec approvals: safeBins could bypass stdin-only constraints via shell expansion

OpenClaw has a command injection in maintainer clawtributors updater

OpenClaw has a path traversal in browser upload allows local file read

OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning

OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals

OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)

OpenClaw Gateway tool allowed unrestricted gatewayUrl override

OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

OpenClaw macOS deep link confirmation truncation can conceal executed agent message

OpenClaw is Missing Webhook Authentication in Telnyx Provider Allows Unauthenticated Requests

OpenClaw has a Path Traversal in Plugin Installation

OpenClaw authorization bypass: operator.write can resolve exec approvals via chat.send -> /approve

OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline

OpenClaw BlueBubbles webhook auth bypass via loopback proxy trust

OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations

OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering

fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)

OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypass

Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change

OpenClaw has a webhook auth bypass when gateway is behind a reverse proxy (loopback remoteAddress trust)

OpenClaw affected by SSRF in Image Tool Remote Fetch

OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access

OpenClaw has an arbitrary transcript path file write via gateway sessionFile

OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing

Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering

pretix unsafely evaluates variables in emails

Google Chromium CSS Use-After-Free Vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1

Soliton Systems K.K FileZen OS Command Injection Vulnerability

MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution

CediPay Affected by Improper Input Validation in Payment Processing

next-mdx-remote affected by arbitrary code execution in React server-side rendering of untrusted MDX content

Apple Multiple Buffer Overflow Vulnerability

Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading

Statamic CMS vulnerable to privilege escalation via stored cross-site scripting

Pillow affected by out-of-bounds write when loading PSD images

cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves