CVE Vulnerability Catalog

Crabbox before version 0.9.0 contains an authentication bypass vulnerability in the coordinator user-token verification path. The verifyUserToken() function fails to reject payloads containing an admin claim, allowing attackers to escalate privileges.

A vulnerability was detected in OpenClaw up to version 2026.1.24, affecting the function handleBlueBubblesWebhookRequest in the file extensions/bluebubbles/src/monitor.ts of the bluebubbles Webhook component. Manipulating this function leads to improper authentication.

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, allowing a crafted XML document to trigger hash flooding.

A buffer overflow in dnsmasq's extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record's end.

Heap-based out-of-bounds write in dnsmasq DHCPv6 allows local attackers to execute code as root.

The DNSSEC validation in dnsmasq has a denial of service (DoS) vulnerability. A remote attacker can send a crafted DNS packet, causing the service to crash.

OpenClaw before version 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations, allowing compromised models to write unsafe configuration changes by bypassing an incomplete denylist protection.

OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during provider setup metadata resolution. Attackers can execute arbitrary JavaScript under the current user account by placing a malicious extensions/<plugin>/setup-api.js file in a repository.

OpenClaw before version 2026.4.20 contains a guard bypass vulnerability in the config.patch and config.apply endpoints. This vulnerability fails to protect operator-trusted settings such as sandbox policy, plugin enablement, gateway auth/TLS, and MCP server configuration.

OpenClaw before version 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Malicious workspace configurations can pass dangerous startup variables to MCP server processes.

In JetBrains TeamCity versions before 2026.1 and 2025.11.5, authenticated users could expose the server API to unauthorized access.

A vulnerability in Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key. This allows an authenticated user with SCIM management privileges to obtain the key using only a valid session.

Bitwarden Server prior to v2026.4.0 contains a missing authorization vulnerability that allows a provider service user to add an arbitrary organization to their provider via POST /providers/{providerId}/clients/existing, resulting in takeover of the target organization. Self-hosted installations are unaffected as this endpoint is restricted to Cloud via SelfHosted(NotSelfHostedOnly = true).

The Open edX Enterprise Service app provides enterprise features to the Open edX platform. From versions 7.0.2 to 7.0.4, the sync_provider_data endpoint in SAMLProviderDataViewSet fetches SAML metadata from a URL stored in SAMLProviderConfig.metadata_source, which can lead to unauthorized HTTP requests.

In the Neat VNC server library prior to version 0.9.6, a pre-authentication stack buffer overflow exists in the RSA-AES security type handler. An unauthenticated remote attacker who can reach the VNC listening socket can send a crafted handshake, leading to server crash.

A vulnerability in the Open edX platform allows authenticated Enterprise Admin users to supply any URL via the metadata_url POST parameter. This URL is passed directly without validation, enabling an attacker to force the server to make HTTP requests to internal network services or malicious endpoints.

Network-AI is a multi-agent orchestrator based on TypeScript/Node.js. In versions prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC requests without any authentication, allowing enumeration and invocation of privileged management tools.

In pyLoad prior to version 0.5.0b3.dev100, there is a vulnerability that allows a user with Perms.MODIFY to specify arbitrary directories as download locations for a package through the set_package_data() API function. The lack of sanitization in the '_folder' key enables this action.

In pyLoad prior to version 0.5.0b3.dev100, the set_config_value() API method improperly managed security-sensitive options, allowing authenticated users with SETTINGS permission to enable proxying and route traffic through a host they control.

Zen Browser prior to version 1.19.9b included a MAR updater that did not verify cryptographic signatures. This creates a risk of delivering unauthorized code to users via the auto-update mechanism.