Skip to content
Noroxi

AntAISecurityLab

31 credited records · 31 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for AntAISecurityLab

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-41408
    9Monitor

    OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypass

    LowCVSS 2.3No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41406
    9Monitor

    OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted Messages

    LowCVSS 2.3No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41405
    34Monitor

    OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing

    HighCVSS 8.7No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41397
    30Monitor

    OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal

    HighCVSS 7.6No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41378
    30Monitor

    OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatch

    HighCVSS 7.7No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41376
    9Monitor

    OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation

    LowCVSS 2.3No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41375
    28Monitor

    OpenClaw < 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm Endpoints

    HighCVSS 7.1No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41374
    27Monitor

    OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization

    MediumCVSS 6.9No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41365
    21Monitor

    OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History

    MediumCVSS 5.3No exploitEPSS 0%

    openclaw · openclawApr 27, 2026

  • CVE-2026-41364
    28Monitor

    OpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload

    HighCVSS 7.2No exploitEPSS 0%

    openclaw · openclawApr 27, 2026

  • CVE-2026-41358
    9Monitor

    OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context

    LowCVSS 2.3No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41357
    8Monitor

    OpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox Backends

    LowCVSS 2.0No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41352
    30Monitor

    OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass

    HighCVSS 7.7No exploitEPSS 1%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41351
    25Monitor

    OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding

    MediumCVSS 6.3No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41347
    9Monitor

    OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints

    LowCVSS 2.3No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41345
    24Monitor

    OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download

    MediumCVSS 6.0No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41338
    17Monitor

    OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations

    MediumCVSS 4.3No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41334
    28Monitor

    OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass

    HighCVSS 7.1No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41331
    27Monitor

    OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription

    MediumCVSS 6.9No exploitEPSS 0%

    openclaw · openclawApr 20, 2026

  • CVE-2026-41330
    8Monitor

    OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy

    LowCVSS 2.0No exploitEPSS 0%

    openclaw · openclawApr 20, 2026

  • CVE-2026-41329
    36Monitor

    OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation

    CriticalCVSS 9.0No exploitEPSS 0%

    openclaw · openclawApr 20, 2026

  • CVE-2026-41297
    19Monitor

    OpenClaw < 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download Redirect

    MediumCVSS 4.8No exploitEPSS 0%

    openclaw · openclawApr 20, 2026

  • CVE-2026-41296
    35Monitor

    OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFile

    HighCVSS 8.8No exploitEPSS 0%

    openclaw · openclawApr 20, 2026

  • CVE-2026-34504
    27Monitor

    OpenClaw < 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal Provider

    MediumCVSS 6.9No exploitEPSS 0%

    openclaw · openclawMar 31, 2026

  • CVE-2026-34503
    34Monitor

    OpenClaw < 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token Revocation

    HighCVSS 8.6No exploitEPSS 0%

    openclaw · openclawMar 31, 2026