CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- openclawOpenClaw < 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action Validation9.2 Critical
- openclawOpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store7.7 High
- openclawOpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution9.2 Critical
- mauriciopoppe math-codegenRemote Code Execution (RCE) via String Literal Injection into math-codegen9.8 Critical
- go-gitgo-git Credential leak via cross-host redirect in smart HTTP transport4.7 Medium
- kimaiKimai before 2.54.0 Username Enumeration via Timing Oracle6.3 Medium
- poporon pz-linkcardPz-LinkCard <= 2.5.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4 Medium
- mervinpraison praisonai, praison praisonaiagents +1 morePraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)8.1 High
- mervinpraison praisonaiIncomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI9.8 Critical
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR8.4 High
- lsegal yardyard: Possible arbitrary path traversal and file access via yard server6.9 Medium
- daprDapr: Service Invocation path traversal ACL bypass8.1 High
- openclawOpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL4.9 Medium
- openclawOpenClaw 2026.4.9 < 2026.4.10 - Sender Policy Bypass in Host Media Attachment Reads4.9 Medium
- openclawOpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags8.9 High
- openclawOpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Execution8.7 High
- openclawOpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools7.1 High
- openclawOpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing8.7 High
- openclawOpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions4.9 Medium
- openclawOpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes7.1 High
- openclawOpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth7.7 High
- openclawOpenClaw < 2026.4.10 - SSRF Policy Bypass in Existing-Session Browser Interaction Routes4.9 Medium
- openclawOpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routes4.9 Medium
- openclawOpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes6.0 Medium
- openclawOpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding9.0 Critical
- openclawOpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup7.7 High
- openclawOpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameter7.1 High
- openclawOpenClaw < 2026.4.14 - Server-Side Request Forgery via Private Network Navigation6.3 Medium
- openclawOpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass4.9 Medium
- openclawOpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling8.3 High
- openclawOpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File7.0 High
- openclawOpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image4.9 Medium
- openclawOpenClaw < 2026.4.12 - Improper Authorization via Empty Approver Lists6.0 Medium
- openclawOpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events9.3 Critical
- openclawOpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy8.7 High
- openclawOpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection8.7 High
- openclawOpenClaw 2026.4.5 through 2026.4.9 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpoint7.1 High
- openclawOpenClaw 2026.4.10 < 2026.4.14 - Missing Sender Authorization in Microsoft Teams SSO Invoke Handler6.3 Medium
- openclawOpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recovery6.0 Medium
- openclawOpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade9.1 Critical
- openclawOpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Path8.2 High
- openclawOpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events9.1 Critical
- openclawOpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes4.9 Medium
- openclawOpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliases7.1 High
- miniupnp project miniupnpdminiupnpd Integer Underflow SOAPAction Header Parsing7.1 High
- openclawOpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches7.6 High
- flowiseai flowiseFlowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials8.2 High
- flowiseai flowiseFlowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs8.7 High
- flowiseai flowiseFlowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)7.6 High
- node-modules compressingComplete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing8.4 High
- Show moreLoading…