Permalink CVE-2026-27523

6.1 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): Low (L)

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

OpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Paths

• GitHub Security Advisory (GHSA-m8v2-6wwh-r4gc) third-party-advisory
• Patch Commit patch
• VulnCheck Advisory: OpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Paths third-party-advisory

---

OpenClaw

• <2026.2.24

Permalink CVE-2026-22174

5.7 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

OpenClaw < 2026.2.22 - Gateway Token Disclosure via Chrome CDP Probe

• GitHub Security Advisory (GHSA-v3j7-34xh-6g3w) third-party-advisory
• Patch Commit patch
• VulnCheck Advisory: OpenClaw < 2026.2.22 - Gateway Token Disclosure via Chrome CDP Probe third-party-advisory

---

OpenClaw

• <2026.2.22

Permalink CVE-2025-41258

8.0 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Adjacent (A)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Adjacent (A)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

LibreChat RAG API Authentication Bypass

• https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20251205-01_… third-party-advisory
• https://github.com/danny-avila/LibreChat product

---

LibreChat

• ==0.8.1-rc2

Permalink CVE-2026-22179

6.6 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

OpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run

• GitHub Security Advisory (GHSA-9p38-94jf-hgjj) third-party-advisory
• Patch Commit patch
• VulnCheck Advisory: OpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run third-party-advisory

---

OpenClaw

• ==2026.2.22
• <2026.2.22

Permalink CVE-2026-22171

8.2 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

OpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File Naming

• GitHub Security Advisory (GHSA-vj3g-5px3-gr46) third-party-advisory
• Patch Commit #1 patch
• Patch Commit #2 patch
• Patch Commit #3 patch
• VulnCheck Advisory: OpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File Naming third-party-advisory

---

OpenClaw

• <2026.2.19

Permalink CVE-2026-32611

7.0 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements

• https://github.com/nicolargo/glances/security/advisories/GHSA-49g7-2ww7-3vf5 x_refsource_CONFIRMexploit
• https://github.com/nicolargo/glances/commit/63b7da28895249d775202d639e5531ba63491a5c x_refsource_MISC
• https://github.com/nicolargo/glances/releases/tag/v4.5.2 x_refsource_MISC

---

glances

• ==< 4.5.2

Permalink CVE-2026-32634

8.1 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Adjacent (A)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Adjacent (A)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

• https://github.com/nicolargo/glances/security/advisories/GHSA-vx5f-957p-qpvm x_refsource_CONFIRMexploit
• https://github.com/nicolargo/glances/commit/61d38eec521703e41e4933d18d5a5ef6f854abd5 x_refsource_MISC
• https://github.com/nicolargo/glances/releases/tag/v4.5.2 x_refsource_MISC

---

glances

• ==< 4.5.2

Permalink CVE-2026-29056

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become admin

• https://github.com/kanboard/kanboard/security/advisories/GHSA-2jvj-q44v-6p3x x_refsource_CONFIRMexploit

---

kanboard

• ==< 1.2.51

Permalink CVE-2026-31973

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

NULL pointer dereference in samtools cram-size

• https://github.com/samtools/samtools/security/advisories/GHSA-x86f-q6fj-cm43 x_refsource_CONFIRM
• https://github.com/samtools/samtools/commit/06fc2a219b3d7c94d3f412c09f6d1efd51199f2f x_refsource_MISC
• http://www.openwall.com/lists/oss-security/2026/03/18/12

---

samtools

• === 1.23
• ==>= 1.22, < 1.22.2
• ==>= 1.17, < 1.21.1

Permalink CVE-2026-3479

created 1 month, 2 weeks ago Activity log

• Created suggestion 1 month, 2 weeks ago

pkgutil.get_data() does not enforce documented restrictions

• https://github.com/python/cpython/pull/146122 patch
• https://mail.python.org/archives/list/security-announce@python.org/thread/WYLLV… vendor-advisory
• https://github.com/python/cpython/issues/146121 issue-tracking

---

CPython

• <3.15.0