AIVirusDB AI Agent Threat Intelligence

Feishu tools could ignore per-account disablement

Mon, 19 Oct 2026 17:55:31 GMT

Feishu tools could ignore per-account disablement. GitHub Advisory Database identifies npm package @openclaw/feishu < 2026.6.9-beta.1 as affected.

Feishu permission tools could ignore per-account disablement

Mon, 19 Oct 2026 17:55:31 GMT

Feishu permission tools could ignore per-account disablement. GitHub Advisory Database identifies npm package @openclaw/feishu < 2026.6.9-beta.1 as affected.

OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks

Fri, 16 Oct 2026 05:15:13 GMT

A vulnerability in the OpenClaw QQBot component allows slash commands to be dispatched before the configured allowFrom policy is applied, potentially bypassing access controls.

OpenClaw webhook rotation could leave a stale-secret window

Mon, 05 Oct 2026 11:54:56 GMT

Affected Slack and Zalo channel runtimes could accept an old webhook secret after secrets reload. Events could therefore be accepted briefly after an operator expected revocation.

OpenClaw browser actions could bypass private-network navigation checks

Mon, 05 Oct 2026 11:54:56 GMT

Some browser interactions could navigate beyond the initial private-network check. An authenticated caller with browser evaluation capability could read content that direct navigation policy would block.

OpenClaw workspace configuration could alter dependency setup

Mon, 05 Oct 2026 11:54:56 GMT

A workspace environment file could influence executable selection during bundled dependency setup. Exposure depends on a trusted operator opening the workspace and lower-trust configuration reaching that feature.

flock wrapper could bypass durable exec approval binding

Wed, 16 Sep 2026 14:09:28 GMT

flock wrapper could bypass durable exec approval binding. The official advisory identifies openclaw <= 2026.6.6 as affected.

Discord guild actions could skip cross-provider requester authorization

Wed, 16 Sep 2026 14:09:28 GMT

Discord guild actions could skip cross-provider requester authorization. The official advisory identifies openclaw = 2026.6.6 as affected.

Browser CDP discovery could accept blocked WebSocket URLs

Wed, 16 Sep 2026 14:09:28 GMT

Browser CDP discovery could accept blocked WebSocket URLs. The official advisory identifies openclaw < 2026.6.6 as affected.

MCP loopback could expose owner-only tools to non-owner runs

Wed, 16 Sep 2026 14:09:28 GMT

MCP loopback could expose owner-only tools to non-owner runs. The official advisory identifies openclaw >= 2026.5.20, < 2026.6.6 as affected.

Sandbox bind mounts could bypass parent-directory denylist checks

Wed, 16 Sep 2026 14:09:28 GMT

Sandbox bind mounts could bypass parent-directory denylist checks. The official advisory identifies openclaw < 2026.6.6 as affected.

Plugin install commands could allow non-owner persistence

Wed, 16 Sep 2026 14:09:28 GMT

Plugin install commands could allow non-owner persistence. The official advisory identifies openclaw >= 2026.5.20, < 2026.6.9 as affected.

Host exec environment filtering could allow Git ext transport

Wed, 16 Sep 2026 14:09:28 GMT

Host exec environment filtering could allow Git ext transport. The official advisory identifies openclaw <= 2026.6.1 as affected.

WhatsApp group IDs could satisfy elevated sender allowlists

Wed, 16 Sep 2026 14:09:28 GMT

WhatsApp group IDs could satisfy elevated sender allowlists. The official advisory identifies openclaw >= 2026.3.22, < 2026.6.6 as affected.

Host exec environment filtering could miss interpreter startup variables

Wed, 16 Sep 2026 14:09:28 GMT

Host exec environment filtering could miss interpreter startup variables. The official advisory identifies openclaw <= 2026.6.1 as affected.

OpenAI-compatible HTTP model overrides could miss admin authorization

Wed, 16 Sep 2026 14:09:28 GMT

OpenAI-compatible HTTP model overrides could miss admin authorization. The official advisory identifies openclaw <= 2026.6.6 as affected.

OpenShell mirror sync could follow remote symlink parents

Wed, 16 Sep 2026 14:09:28 GMT

OpenShell mirror sync could follow remote symlink parents. The official advisory identifies openclaw <= 2026.6.6 as affected.

Sandbox exec-server HTTP requests could reach internal networks

Wed, 16 Sep 2026 14:09:28 GMT

Sandbox exec-server HTTP requests could reach internal networks. The official advisory identifies openclaw < 2026.6.6 as affected.

Isolated cron jobs could regain denied exec tools

Wed, 16 Sep 2026 14:09:28 GMT

Isolated cron jobs could regain denied exec tools. The official advisory identifies openclaw >= 2026.6.1, < 2026.6.9 as affected.

MS Teams message actions could miss requester authorization

Wed, 16 Sep 2026 14:09:28 GMT

MS Teams message actions could miss requester authorization. The official advisory identifies openclaw >= 2026.4.12-beta.1, < 2026.6.6 as affected.