Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: openclaw matrix 2026.8.1 Clear all filters
TI-2026-64742 CVE-2026-100582 · GHSA-x2gp-w9p4-cpwg

OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass

Priority LOW 31

OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00209 Published 2026-09-26 Fixed in 2026.8.1 CWE-862
TI-2026-64702 CVE-2026-100541 · GHSA-4793-q4pp-q755

OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Folding

Priority LOW 35

OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase complete Matrix user IDs — including historical localparts and the case-sensitive server-name portion — when deri…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00303 Published 2026-09-26 Fixed in 2026.8.1 CWE-178