AIVirusDB
Menu
SearchTeam launch updates

Explainable prioritization

Threat rankings

Prioritize what deserves attention without treating one score or one source as the whole truth.

01Severity + exploitation
02Confidence + freshness
03Patch status + ecosystem scope
Read the scoring method →

Ranked by AIVirusDB Risk Score

ScoreThreatEcosystemStatusVerified
55Medium riskLangChain serialization can expose secrets through untrusted agent dataGHSA-c67j-w6g6-q2cm · CVE-2025-68664 · DATA EXTRACTIONPatched
53Medium riskMCP loopback could expose owner-only tools to non-owner runsGHSA-52xj-c9p8-78cv · OPENCLAW EXPLOITopenclaw + mcpPatched
50Medium riskFeishu tools could ignore per-account disablementGHSA-2q7j-2vhx-56g8 · OPENCLAW EXPLOITopenclawPatched
50Medium riskFeishu permission tools could ignore per-account disablementGHSA-w8wf-3qvj-6xqf · OPENCLAW EXPLOITopenclawPatched
50Medium riskflock wrapper could bypass durable exec approval bindingGHSA-3fp5-v549-9v66 · OPENCLAW EXPLOITopenclawPatched
50Medium riskDiscord guild actions could skip cross-provider requester authorizationGHSA-3pmr-x9g8-m55r · OPENCLAW EXPLOITopenclawPatched
50Medium riskBrowser CDP discovery could accept blocked WebSocket URLsGHSA-3x84-qq85-fj65 · OPENCLAW EXPLOITopenclawPatched
50Medium riskSandbox bind mounts could bypass parent-directory denylist checksGHSA-575v-8hfq-m3mc · OPENCLAW EXPLOITopenclawPatched
50Medium riskPlugin install commands could allow non-owner persistenceGHSA-7vrr-rp4x-4g76 · OPENCLAW EXPLOITopenclawPatched
50Medium riskHost exec environment filtering could allow Git ext transportGHSA-9969-8g9h-rxwm · OPENCLAW EXPLOITopenclawPatched
50Medium riskWhatsApp group IDs could satisfy elevated sender allowlistsGHSA-fh38-965w-f6c3 · OPENCLAW EXPLOITopenclawPatched
50Medium riskHost exec environment filtering could miss interpreter startup variablesGHSA-hjr6-g723-hmfm · OPENCLAW EXPLOITopenclawPatched
50Medium riskOpenAI-compatible HTTP model overrides could miss admin authorizationGHSA-jhfx-v2j8-x3m6 · OPENCLAW EXPLOITopenclawPatched
50Medium riskOpenShell mirror sync could follow remote symlink parentsGHSA-m38g-vpwj-mpg9 · OPENCLAW EXPLOITopenclawPatched
50Medium riskSandbox exec-server HTTP requests could reach internal networksGHSA-mgvr-6gvw-3rgr · OPENCLAW EXPLOITopenclawPatched
50Medium riskIsolated cron jobs could regain denied exec toolsGHSA-mm9g-83wh-mhwj · OPENCLAW EXPLOITopenclawPatched
50Medium riskMS Teams message actions could miss requester authorizationGHSA-p5xh-frrh-cmgj · OPENCLAW EXPLOITopenclawPatched
50Medium riskMessage mutations could skip requester authorizationGHSA-v7hx-r36p-f68m · OPENCLAW EXPLOITopenclawPatched
50Medium riskHost exec environment filtering could miss rustup startup variablesGHSA-wxh3-g47h-q3mc · OPENCLAW EXPLOITopenclawPatched
47Medium riskMCP Go HTTP servers can accept cross-site requests that trigger toolsGHSA-89xv-2j6f-qhc8 · CVE-2026-33252 · MCP CONFUSED DEPUTYmcpPatched
44Medium riskOpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checksGHSA-77pv-3w4q-vrj5 · CVE-2026-53834 · OPENCLAW EXPLOITopenclawPatched
44Medium riskOpenClaw workspace configuration could alter dependency setupGHSA-24vr-rprv-67rf · CVE-2026-53846 · OPENCLAW EXPLOITopenclawPatched
40Medium riskNative web search could ignore OpenClaw tool policyGHSA-v4f6-x5g5-2g4g · OPENCLAW EXPLOITopenclawPatched
40Medium riskPlugin install wrappers could skip install policyGHSA-wgq8-x5wm-g4rw · OPENCLAW EXPLOITopenclawPatched
35Low riskLangChain file-search agents can read beyond their configured directoryGHSA-gr75-jv2w-4656 · CVE-2026-55443 · DATA EXTRACTIONPatched
34Low riskOpenClaw webhook rotation could leave a stale-secret windowGHSA-275c-xpvc-jgfw · CVE-2026-53830 · OPENCLAW EXPLOITopenclawPatched
34Low riskOpenClaw browser actions could bypass private-network navigation checksGHSA-2hfg-4fh4-qp7f · CVE-2026-53812 · OPENCLAW EXPLOITopenclawPatched