CVE Vulnerability Catalog

OpenClaw before version 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious workspaces can set variables like OPENCLAW_GIT_DIR to manipulate trusted OpenClaw runtime behavior during source-update or installer flows.

OpenClaw before version 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and access unauthorized file contents.

OpenClaw before version 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization. Attackers with DM-paired sender IDs can execute room control commands without being in configured allowlists.

OpenClaw before version 2026.4.15 captures resolved bearer-auth configuration at startup, allowing revoked tokens to remain valid after SecretRef rotation. Gateway HTTP and WebSocket handlers fail to re-resolve authentication per-request.

OpenClaw before 2026.4.10 contains an insufficient environment variable denylist vulnerability in its exec environment policy. Attackers can manipulate these environment variables to influence execution behavior and network connectivity.

OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforcement. Browser press/type style interactions can bypass post-action security checks to execute unauthorized navigation.

OpenClaw before 2026.4.5 contains a server-side request forgery (SSRF) vulnerability in the CDP /json/version WebSocket endpoint. This allows attackers to pivot to untrusted second-hop targets.

Masa CMS versions 7.5.2 and earlier have a vulnerability in the createBundle method in `csettings.cfc` that improperly validates anti-CSRF tokens. An attacker can craft a malicious webpage that, when visited by a logged-in administrator, silently creates a site bundle that is saved in a publicly accessible directory.

Masa CMS, a fork of Mura CMS, in versions 7.5.2 and earlier has a vulnerability in the `cTrash.restore` function that improperly validates anti-CSRF tokens for content restoration requests. An attacker can trick a logged-in administrator into submitting a forged request that restores deleted items.

Masa CMS versions 7.5.2 and earlier have a vulnerability in the cTrash.empty function that does not validate anti-CSRF tokens for trash management requests. An attacker can induce a logged-in administrator to submit a forged request that empties the trash and permanently deletes all deleted content.

Masa CMS, a content management system, in versions 7.5.2 and earlier has a vulnerability in the cUsers.updateAddress function that improperly validates anti-CSRF tokens. An attacker can induce a logged-in administrator to submit a forged request, allowing for the addition, modification, or deletion of user address records.

In Jupyter Notebook versions 7.0.0 through 7.5.5 and JupyterLab versions up to 4.5.6, there is a stored cross-site scripting issue in the help command linker that can be exploited to steal authentication tokens. An attacker can craft a malicious notebook file that triggers unauthorized actions when the user interacts with it.

OpenMRS Core versions 2.7.8 and earlier and 2.8.0 through 2.8.5 are vulnerable to a Zip Slip attack that allows an attacker to upload malicious files. Due to improper path checking during the automatic extraction of .omod archives, files can be written outside the intended module directory.

Insufficient policy enforcement in DevTools in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic.

A use after free vulnerability in WebRTC in Google Chrome prior to version 148.0.7778.96 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Insufficient validation of untrusted input in Cast in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who compromised the renderer process to perform privilege escalation via a crafted HTML page.

A use after free vulnerability in Audio in Google Chrome on Mac prior to version 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use After Free vulnerability in Printing in Google Chrome on Linux, Mac, and ChromeOS prior to version 148.0.7778.96 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to version 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to version 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file.