Security Intel Hub 23504+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

OpenClaw Image Input Validation Bypass Vulnerability and Fix

github.com · 2026-04-24

# Vulnerability Summary ## Vulnerability Overview The OpenClaw platform has an image input validation vulnerability that allows attackers to bypass existing security restrictions by crafting image inp…

OpenClaw SSH Subprocess Environment Variable Leakage Fix

github.com · 2026-04-24

# Vulnerability Summary ## Vulnerability Overview This commit fixes a security vulnerability in environment variables of SSH subprocesses within the OpenClaw project. The vulnerability allows sensitiv…

OpenShell Mirror Sync Directory Exclusion Bypass Vulnerability Analysis

github.com · 2026-04-24

### Vulnerability Overview This vulnerability involves the mirror synchronization feature of `OpenShell`, specifically that the `replaceDirectoryContents` function does not correctly exclude certain d…

Discord Group DM Whitelist Bypass Vulnerability Fix Analysis

github.com · 2026-04-24

# Vulnerability Summary ## Overview This vulnerability involves bypassing the whitelist restriction for group DM channels via Discord native commands. Specifically, an attacker can circumvent access c…

openclaw-gateway-tool config protection bypass fix

github.com · 2026-04-24

# Vulnerability Summary ## Overview This vulnerability involves bypassing the protection mechanism for write operations on protected gateway configuration in the `openclaw` project. Specifically, when…

Device Token Rotation Session Revocation Bypass

github.com · 2026-04-24

### Vulnerability Overview This vulnerability involves the failure to revoke active sessions during token rotation. Specific manifestations include: - After token rotation, active sessions of the old …

OpenClaw session-status visibility bypass vulnerability and fix

github.com · 2026-04-24

### Vulnerability Overview This vulnerability involves the visibility protection mechanism of the `session-status` tool, which does not sufficiently restrict all callers. In certain cases, this allows…

OpenClaw Plivo Voice Callback SSRF Fix

github.com · 2026-04-24

### Vulnerability Overview - **Vulnerability Name**: `fix(voice-call): pin plivo callback origins` - **Vulnerability Description**: In the file `extensions/voice-call/src/providers/plivo.ts`, there is…

Discord Bot Group DM Route and Auth Logic Vulnerability Fix

github.com · 2026-04-24

# Vulnerability Summary ## Overview This commit fixes routing and authentication logic vulnerabilities related to Group DM (Group Direct Message) component interactions in the Discord bot. The main is…

openclaw Discord Slash Commands Bypass Group DM Channel Allowlist

github.com · 2026-04-24

# Discord Slash Commands Bypass Group DM Channel Allowlist ## Vulnerability Overview - **Vulnerability Name**: Discord Slash Commands Bypass Group DM Channel Allowlist - **Severity**: Low - **Descript…

OpenClaw Gateway Shared Secret Rate Limit Bypass Fix

github.com · 2026-04-24

# Vulnerability Summary ## Vulnerability Overview The OpenClaw gateway failed to properly retain shared secret rate limiting during hybrid handshake processes, resulting in bypass of security restrict…

OpenClaw Gateway Trusted Proxy Bypass Vulnerability and Fix

github.com · 2026-04-24

# OpenClaw Vulnerability Summary ## Vulnerability Overview A security vulnerability exists in the OpenClaw gateway that allows an attacker to bypass the HTTP source check of the trusted proxy by forgi…

OpenClaw Cross-Origin Redirect Sensitive Information Disclosure Vulnerability and Fix

github.com · 2026-04-24

# Vulnerability Summary ## Vulnerability Overview OpenClaw has a sensitive information leakage vulnerability during Cross-Origin Redirects. When the application performs a cross-origin redirect, it in…

OpenClaw Pairing Request Counting Logic Fix

github.com · 2026-04-24

# Vulnerability Summary ## Vulnerability Overview This vulnerability involves a logic error in the pairing request counting within the OpenClaw project. Specifically: - When limiting the number of pen…

OpenClaw Telegram Pairing AllowFrom Migration Logic Defect

github.com · 2026-04-24

# Vulnerability Summary ## Vulnerability Overview There is a migration logic flaw in the Telegram pairing allow list (`pairing allowFrom`) within the OpenClaw project. This flaw causes the system to f…

Gateway Service Unauthenticated Command Execution via Node Pairing Bypass

github.com · 2026-04-24

# Vulnerability Summary ## Vulnerability Overview - **Vulnerability Type**: Unauthorized Access to Node Pairing Commands - **Vulnerability Description**: Allows execution of node commands before node …

OpenClaw fix for workspace .env variable override vulnerability

github.com · 2026-04-24

### Vulnerability Overview This vulnerability involves a fix for the override of the `bundled-root` environment variable in the `workspace` configuration file. The specific issue is that certain envir…

OpenClaw Connection Snapshot Metadata Unauthorized Access Fix

github.com · 2026-04-24

### Vulnerability Overview This vulnerability involves an issue with the administrator-scoped client in the OpenClaw project related to connection snapshot metadata. Specific manifestations are: - Con…

Telynx Webhook Signature Verification Bypass Fix

github.com · 2026-04-24

### Vulnerability Overview This vulnerability involves the webhook security verification mechanism of Telynx. An attacker can bypass Telynx’s signature verification by crafting specific requests, ther…

libxml2 CVE-2026-6732 DoS via XSD Validation SIGSEGV Analysis

bugzilla.redhat.com · 2026-04-24

# Bug 2461300 Vulnerability Summary ## Vulnerability Overview - **CVE ID**: CVE-2026-6732 - **Vulnerability Type**: Denial of Service - **Trigger Condition**: Triggered by a specially crafted XSD vali…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 23504+