All 5 CVE vulnerabilities found in clawhub, with AI-generated Chinese analysis, references, and POCs.
Vendor: openclaw
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-100603 | ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports CWE-799 | 5.4 | Medium | 2026-09-26 |
| CVE-2026-100604 | ClawHub Authentication Bypass via Former Publisher Skill Control CWE-863 | 5.4 | Medium | 2026-09-26 |
| CVE-2026-100602 | ClawHub Changelog Preview Information Disclosure via Authorization Bypass CWE-862 | 6.5 | Medium | 2026-09-26 |
| CVE-2026-100601 | ClawHub SSRF via Unchecked DNS Resolution in Profile Image CWE-918 | 5.3 | Medium | 2026-09-26 |
| CVE-2026-100600 | ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API CWE-770 | 5.3 | Medium | 2026-09-26 |
All 5 known CVE vulnerabilities affecting clawhub with full Chinese analysis, references, and POCs where available.