漏洞公告

OpenClaw: Discord allowFrom could bind to mutable display names

OpenClaw: Focus command could miss controlScope enforcement

OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install

OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns

OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers

OpenClaw: memory-wiki shared search could miss session visibility checks

OpenClaw: Config recovery could restore openclaw.json with broad file permissions

OpenClaw: Zalo allowFrom could bind to mutable display names

OpenClaw: Skill-command dispatch could skip before-tool-call hooks

OpenClaw: Active Memory write scope could mutate global config

OpenClaw: Exported session HTML could keep unsafe markdown links

OpenClaw: Slack reaction events could ignore reaction notification settings

OpenClaw: Bootstrap token replay could widen pending pairing scopes

OpenClaw: Shell positional parameters could weaken strict inline-eval checks

OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently

OpenClaw: Exec allowlist could miss side effects from transparent command wrappers

[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat

[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions

[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat

[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat

Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE