CVE Vulnerability Catalog

OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass sandbox boundaries and route execution to remote nodes instead of intended sandbox paths.

ERPGo SaaS version 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields. These formulas execute on the workstations of users who open the exported CSV in a spreadsheet application.

OpenEMR version 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections. Attackers can send repeated login attempts to the main login endpoint, systematically testing username and password combinations.

The WordPress Plugin Backup Migration version 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file paths. Attackers can enumerate backup directories through configuration files and complete logs.

Frappe Framework ERPNext version 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame introspection. Attackers can create a server script via the /app/server-script endpoint and access the gi_frame attribute to traverse the call stack and invoke os.popen to execute system commands.

In fast-uri versions up to 3.1.1, the normalize() function decoded percent-encoded authority delimiters inside the host component and re-emitted them as raw delimiters during serialization. This allows an attacker to change the URI authority to a different domain than the input appeared to specify.

The Form Maker by 10Web, a plugin for creating contact forms in WordPress, is vulnerable to SQL Injection via the 'inputs' parameter in versions up to and including 1.15.42. This is due to insufficient escaping of user-supplied parameters and lack of proper preparation of the existing SQL query.

Apache Thrift before version 0.23.0 improperly validates TLS certificates, allowing host mismatch. An attacker can exploit this for man-in-the-middle attacks.

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions, the server may incorrectly process fragmented data chunks, leading to the registration of a truncated badge ID string.

The Forminator Forms plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.52.1, allowing unauthenticated attackers to read the contents of arbitrary files on the server.

A vulnerability was found in 54yyyu code-mcp in the git_operation function of the src/code_mcp/server.py file of the MCP Tool component. Manipulating the operation argument results in command injection, allowing for remote attacks.

A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8, concerning the function is_safe_path of the file src/code_mcp/server.py of the MCP File Handler component. Such manipulation leads to path traversal, allowing for remote attacks.

A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2 in the functions create_notebook, read_notebook, edit_cell, and add_cell of the file server.py. This vulnerability allows for path traversal, potentially leading to unauthorized access.

The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'status' parameter in the wpr_update_form_action_meta AJAX action in all versions up to and including 1.7.1056. This is due to insufficient input sanitization and output escaping, combined with a publicly leaked nonce that allows unauthenticated access to the AJAX handler.

The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to SQL Injection via the 'attributekey' parameter in versions up to and including 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.

Vulnerability in the Oracle MCP Server Helper Tool allows unauthenticated attackers with network access via HTTP to compromise the tool. Successful exploitation can lead to the execution of malicious SQL in the Oracle MCP Server Helper Tool.

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to and including 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This allows unauthenticated attackers to append additional SQL queries into already existing queries, which can be used to extract sensitive information from the database.

An issue was discovered in Nix before version 2.34.7 and Lix before version 2.95.2 related to unbounded recursion in the NAR parser, which could lead to a stack-to-heap overflow. If the parser is run on a coroutine stack, it may allow arbitrary code execution as the Nix daemon running with root privileges.

A security flaw has been identified in Axle-Bucamp MCP-Docusaurus that allows path traversal attacks by manipulating the DOCS_DIR/path argument in the update_document/continue_document/delete_document/get_content functions in the app/routes/document.py file.

A security flaw in A-G-U-P-T-A wireshark-mcp allows for os command injection through the quick_capture function in the pyshark_mcp.py file. The attack can be launched remotely.