漏洞公告

Duplicate Advisory: BlueBubbles sender policy could match mutable conversation identifiers

Duplicate Advisory: Workspace-derived service PATH could influence trash command selection

Duplicate Advisory: Zalo allowFrom could bind to mutable display names

Duplicate Advisory: Hostname checks could treat trailing-dot hosts inconsistently

Duplicate Advisory: Config recovery could restore openclaw.json with broad file permissions

Duplicate Advisory: Internal/webchat command auth could inherit ownerAllowFrom wildcard state

Duplicate Advisory: Empty-scope device re-pairing could confuse caller scope containment

Duplicate Advisory: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots

Duplicate Advisory: Linux and macOS exec allowlists skipped configured argument patterns

Duplicate Advisory: Shell positional parameters could weaken strict inline-eval checks

Duplicate Advisory: Exec allowlist could miss side effects from transparent command wrappers

Duplicate Advisory: Skill-command dispatch could skip before-tool-call hooks

Duplicate Advisory: Workspace .env npm_execpath could influence bundled runtime dependency install

Duplicate Advisory: Discord allowFrom could bind to mutable display names

Duplicate Advisory: Focus command could miss controlScope enforcement

Duplicate Advisory: Slack reaction events could ignore reaction notification settings

Duplicate Advisory: Active Memory write scope could mutate global config

Duplicate Advisory: MCP Streamable HTTP redirects could forward configured custom headers to another origin

Duplicate Advisory: Pairing-scoped device session could restore revoked node token authority

Duplicate Advisory: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution

Duplicate Advisory: Exported session HTML could keep unsafe markdown links

Duplicate Advisory: memory-wiki shared search could miss session visibility checks

Duplicate Advisory: utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins