OpenClaw: memory-wiki ingest could read local files with operator.write scope

GHSA-p2fh-f5fc-44hr MODERATE about 1 month ago

### Summary memory-wiki ingest could read local files with operator.write scope. In affected versions, a Gateway caller with `operator.write` acce...

npm

No PRs yet

Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

EEF-CVE-2026-54891 GHSA-gf6r-99xw-6qg6 CVE-2026-54891 MEDIUM about 1 month ago

## Summary Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls\_gen\_con...

No PRs yet

DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

EEF-CVE-2026-55950 GHSA-hwfc-5hf4-gvr3 CVE-2026-55950 HIGH about 1 month ago

## Summary Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls\_packet\_demux module) allows an unauthenticate...

No PRs yet

SSH SFTP server denial of service via extended channel data infinite loop

EEF-CVE-2026-54886 GHSA-7wp4-pc27-2vj9 CVE-2026-54886 MEDIUM about 1 month ago

## Summary Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh\_sftpd module) allows an authenticated SFTP...

No PRs yet

TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

EEF-CVE-2026-55952 GHSA-8c57-44c9-pc59 CVE-2026-55952 HIGH about 1 month ago

## Summary The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared...

No PRs yet

DTLS server cookie bypass during startup window due to empty initial cookie secret

EEF-CVE-2026-54887 GHSA-p2m2-3c2w-8jp8 CVE-2026-54887 MEDIUM about 1 month ago

## Summary Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the st...

No PRs yet

SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

EEF-CVE-2026-53422 GHSA-h9pw-h5w4-h976 CVE-2026-53422 LOW about 1 month ago

## Summary Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh\_sftpd module) allows an authenticated SFTP user to enumerate the ...

No PRs yet

OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates

GHSA-hw9r-h9mr-4jff HIGH about 1 month ago

### Summary Some internal command handlers require `operator.approvals` or `operator.admin` scopes. In affected releases, a scoped Gateway `chat.s...

npm

No PRs yet

OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion

GHSA-mhq8-78pj-5j79 HIGH about 1 month ago

### Summary On POSIX nodes, OpenClaw's `system.run` safe-bin checks could approve a command before shell expansion changed how the command was int...

npm

No PRs yet

OpenClaw: QQBot native approval buttons did not enforce configured approver identity

GHSA-mgq6-vr84-7m2j CVE-2026-35630 HIGH about 1 month ago

### Summary OpenClaw's QQBot channel can deliver native approval buttons for exec and plugin approvals. In affected releases, the button callback ...

npm

No PRs yet

OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority

GHSA-6fvr-66p3-3qj4 CVE-2026-53814 HIGH about 1 month ago

### Summary OpenClaw hook ingress can start automated agent runs using a configured hook token. In affected releases, a hook-triggered run could s...

npm

No PRs yet

OpenClaw: Control UI locality spoofing could mint a durable admin device token

GHSA-chr9-m4q2-76hw CVE-2026-53817 HIGH about 1 month ago

### Summary In affected LAN/shared-token Control UI deployments, a caller could spoof locality information used during Control UI pairing and obta...

npm

No PRs yet

OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers

GHSA-rggc-m335-3wvj HIGH about 1 month ago

### Summary Same-host trusted-proxy deployments could accept local forged identity headers. In affected versions, a local same-host caller that ca...

npm

No PRs yet

OpenClaw's marketplace runtime extension metadata could point at unscanned payloads

GHSA-v6r2-jh58-xx6w CVE-2026-53810 HIGH about 1 month ago

### Summary Marketplace runtime extension metadata could point at unscanned payloads. In affected versions, a package selected for installation by...

npm

No PRs yet

OpenClaw's browser act interactions could bypass private-network navigation checks

GHSA-2hfg-4fh4-qp7f CVE-2026-53812 MODERATE about 1 month ago

### Summary OpenClaw's browser control SSRF checks blocked direct navigation to private or loopback URLs, but some Playwright `act` interactions c...

npm

No PRs yet

OpenClaw: Shell wrapper argv could change between approval and execution

GHSA-2j8v-hwgc-x698 HIGH about 1 month ago

### Summary Shell wrapper argv could change between approval and execution. In affected versions, a command request using a shell wrapper form cou...

npm

No PRs yet

OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn

GHSA-qh2f-99mv-mrcf MODERATE about 1 month ago

### Summary Bundle MCP loopback could miss its exec denylist on session spawn. In affected versions, a caller that can reach the affected bundled ...

npm

No PRs yet

OpenClaw: Exec approval display truncation could hide the command being approved

GHSA-xww8-gqvh-92x9 HIGH about 1 month ago

### Summary OpenClaw exec approvals could show a shortened command in the approval UI while keeping the full original command for execution. For v...

npm

No PRs yet

OpenClaw: Message read actions could skip channel allowlist checks

GHSA-q7q8-3mgw-q67r CVE-2026-53815 HIGH about 1 month ago

### Summary Message read actions could skip channel allowlist checks. In affected versions, a lower-trust caller with access to the affected messa...

npm

No PRs yet

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

GHSA-84hp-mqvj-3p8h CVE-2026-50027 CRITICAL about 1 month ago

## Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete ### Summary All HTTP routes under `/api/docum...

pypi

No PRs yet

GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward

GHSA-gcfq-8gqf-4876 CVE-2026-45045 MODERATE about 1 month ago

## Summary The `BalancerForward` proxy helper in GoFiber uses `Header.Add()` instead of `Header.Set()` when injecting the `X-Real-IP` header. This...

go

No PRs yet

GoFiber Vulnerable to Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

GHSA-g5vh-55hw-rxm8 CVE-2026-44332 MODERATE about 1 month ago

## Summary The default `Authorizer` function in GoFiber's BasicAuth middleware uses short-circuit evaluation that skips password hash comparison f...

go

No PRs yet

OpenClaw MCP SSE redirects could forward Authorization headers

GHSA-9c3v-684m-579c MODERATE about 1 month ago

### Summary MCP SSE redirects could forward Authorization headers. In affected versions, a lower-trust caller or configured input path could execu...

npm

No PRs yet

Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token

GHSA-6gr2-qh89-hxwm CVE-2026-50143 HIGH about 1 month ago

## Actor MCP path authority injection leaks Apify token ### Summary `@apify/actors-mcp-server` version `0.10.7` builds Actor standby URLs by dire...

npm

No PRs yet

goshs: Share-link ?token=… redemption races past download limit

GHSA-j48m-h7xq-2xpj CVE-2026-50139 MODERATE about 1 month ago

# Share-link `?token=…` redemption races past download limit **Ecosystem:** Go **Package:** `goshs.de/goshs/v2` (`github.com/patrickhener/goshs`) ...

go

No PRs yet

Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header

GHSA-62q6-4hv4-vjrw CVE-2026-53943 CRITICAL about 1 month ago

### Impact When Ghost is behind a shared caching layer that results in cached content being shared between different visitors (e.g., Fastly, Cloud...

npm

No PRs yet

goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags

GHSA-3whc-qvhv-xqjp CVE-2026-50138 HIGH about 1 month ago

# WebDAV listener ignores `--read-only`, `--upload-only`, and `--no-delete` mode flags **Ecosystem:** Go **Package:** `goshs.de/goshs/v2` (`github...

go

No PRs yet

ORAS Go forwards registry credentials across registry redirects

GHSA-vh4v-2xq2-g5cg MODERATE about 1 month ago

# ORAS Go forwards registry credentials across registry redirects Reporter / public credit: JUNYI LIU ## Summary ORAS Go can forward registry cr...

go

No PRs yet

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

GHSA-p9jg-fcr6-3mhf CVE-2026-53712 HIGH about 1 month ago

## Summary A flaw in `com.ongres.scram:scram-client` allows an attacker capable of performing a TLS man-in-the-middle (MITM) attack to silently do...

maven

3

Dependabot PRs

`oras-go` tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution

GHSA-fxhp-mv3v-67qp CVE-2026-50163 HIGH about 1 month ago

### Root cause The tar-extraction helper `ensureLinkPath` at [`content/file/utils.go:262-275`](https://github.com/oras-project/oras-go/blob/main/c...

go

No PRs yet

oras-go has file store write outside workingDir via symlink traversal

GHSA-8xwf-rjm4-xvhv CVE-2026-50162 MODERATE about 1 month ago

The file content store in `oras-go` attempts to confine writes to `workingDir` when `AllowPathTraversalOnWrite=false`, but the guard is lexical and...

go

No PRs yet

oras-go blob upload vulnerable to credential forwarding via unvalidated Location header

GHSA-jxpm-75mh-9fp7 CVE-2026-50151 HIGH about 1 month ago

## Summary oras-go follows a registry-controlled `Location` header during the monolithic blob upload flow and reuses the `Authorization` header fr...

go

No PRs yet

Keycloak has privilege escalation via improper scope mapping enforcement

GHSA-32h4-44jj-c5vx CVE-2026-9795 HIGH about 1 month ago

### Description A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client management per...

maven

No PRs yet

oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

GHSA-xf85-363p-868w CVE-2026-48978 LOW about 1 month ago

## Summary oras-go's `auth.Client` follows the `realm` URL from a registry's `WWW-Authenticate: Bearer` challenge without validating its scheme or...

go

No PRs yet

Rancher has Privilege Escalation from Project Owner to Host

GHSA-vx8h-4prv-g744 CVE-2026-41052 CRITICAL about 1 month ago

### Impact A vulnerability has been identified in Rancher Manager that allows users assigned the Project Owner role to modify Pod Security Admissi...

go

No PRs yet

Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)

GHSA-28pq-6qxg-wg5r CVE-2026-48824 MODERATE about 1 month ago

### Summary The fix for GHSA-fpxj-m5q8-fphw (CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prevent DoS via unlimited SMTP DATA and /ap...

go

No PRs yet

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key

GHSA-hhx9-57xq-r5rw CVE-2026-48819 MODERATE about 1 month ago

### Summary `dist/clients/core/params.ts` in `@hey-api/openapi-ts` ships a runtime template that is copied verbatim into every generated SDK as `p...

npm

No PRs yet

Rancher has over-inclusive team membership expansion in GitHub App authentication provider

GHSA-4j6x-2764-m8gh CVE-2026-41053 HIGH about 1 month ago

### Impact A vulnerability has been identified within Rancher Manager in the GitHub App authentication provider. When evaluating permissions, the p...

go

No PRs yet

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

GHSA-xr65-5cpm-g36x CVE-2026-44935 CRITICAL about 1 month ago

### Impact A vulnerability in Fleet for Rancher Manager affects multi-tenancy environments where different tenants share the same downstream cluste...

go

No PRs yet

Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml

GHSA-hx4v-cxpf-vh8m CVE-2026-44936 MODERATE about 1 month ago

### Impact A vulnerability has been identified in Fleet when the `helmRepoURLRegex` field isn't set on a `GitRepo` resource. Fleet's bundle reader ...

go

No PRs yet

Rancher vulnerable to command injection through unsanitized YAML parameter

GHSA-mhc6-2gfq-xx62 CVE-2026-44939 CRITICAL about 1 month ago

### Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint `/v3/import/{token}_{clus...

go

No PRs yet

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

GHSA-jmf4-m7j9-g72r CVE-2026-44937 HIGH about 1 month ago

### Impact A vulnerability has been identified in Fleet when the webhook endpoint is configured without a secret; an attacker can forge webhook req...

go

No PRs yet

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

GHSA-864g-863m-vcvq CVE-2026-44938 HIGH about 1 month ago

### Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from `namespaceLabels` ...

go

No PRs yet

QUIC has Broken TLS verification

GHSA-2r8v-p65x-3663 CVE-2026-49457 CRITICAL about 1 month ago

### Impact The QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the cert...

hex

No PRs yet

land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory

GHSA-j6hm-v3x2-qv6j LOW about 1 month ago

### Summary `ArchiveUtils.untar(InputStream, Path)` and `ArchiveUtils.unzip(InputStream, Path)` in `land.oras:oras-java-sdk` create symbolic-link ...

maven

No PRs yet

Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass

GHSA-g6vg-wj8f-48cj CVE-2026-49998 HIGH about 1 month ago

#### Summary Centrifugo's dynamic JWKS endpoint feature can verify a JWT for one allowed issuer using a public key cached from another allowed iss...

go

No PRs yet

SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted

GHSA-whwg-vh4f-pmmf CVE-2026-49997 MODERATE about 1 month ago

In SurrealDB, records can be connected as a graph: a `RELATE` statement creates an edge record between two node records. If either endpoint node is...

cargo

No PRs yet

SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation

GHSA-fwg2-gr34-q3w8 MODERATE about 1 month ago

When a user configures `ALGORITHM ES512` for any JWT access method (`DEFINE ACCESS ... TYPE JWT ALGORITHM ES512`), SurrealDB silently substitutes E...

cargo

No PRs yet

SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths

GHSA-c8jx-96c9-8xrp MODERATE about 1 month ago

A record user could learn the value of a hidden field by counting how many records match a guess. When `DEFINE FIELD ... PERMISSIONS FOR select WH...

cargo

No PRs yet

SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization

GHSA-wp87-mgvq-5j93 MODERATE about 1 month ago

An anonymous caller could create new namespaces and databases on a running SurrealDB instance without holding `DEFINE NAMESPACE` or `DEFINE DATABAS...

cargo

No PRs yet