qclawer

46 kredili kayıt · son 12 ayda 46 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
9İzleyin	CVE-2026-53852İstismar yok	OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairingopenclaw · openclaw · CWE-636	Düşük2,3	—	%0,2	16 Haz 2026
27İzleyin	CVE-2026-53850İstismar yok	OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Commandopenclaw · openclaw · CWE-862 Erişim denetimi (IDOR)	Orta6,8	—	%0,0	16 Haz 2026
21İzleyin	CVE-2026-53847İstismar yok	OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scopeopenclaw · openclaw · CWE-266	Orta5,3	—	%0,1	16 Haz 2026
24İzleyin	CVE-2026-53844İstismar yok	OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Searchopenclaw · openclaw · CWE-862 Erişim denetimi (IDOR)	Orta6,0	—	%0,2	16 Haz 2026
24İzleyin	CVE-2026-53863İstismar yok	OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policyopenclaw · openclaw · CWE-639 Erişim denetimi (IDOR)	Orta6,0	—	%0,1	16 Haz 2026
21İzleyin	CVE-2026-53861İstismar yok	OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOSopenclaw · openclaw · CWE-184 RCE	Orta5,3	—	%0,2	16 Haz 2026
24İzleyin	CVE-2026-53854İstismar yok	OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commandsopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Orta6,0	—	%0,2	16 Haz 2026
9İzleyin	CVE-2026-53845İstismar yok	OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skippingopenclaw · openclaw · CWE-693	Düşük2,3	—	%0,1	16 Haz 2026
25İzleyin	CVE-2026-53837İstismar yok	OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlersopenclaw · openclaw · CWE-636 Kimlik doğrulamasız	Orta6,3	—	%0,1	12 Haz 2026
9İzleyin	CVE-2026-53835İstismar yok	OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindingsopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Düşük2,3	—	%0,1	12 Haz 2026
32İzleyin	CVE-2026-53834İstismar yok	OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commandsopenclaw · openclaw · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,2	—	%0,1	12 Haz 2026
30İzleyin	CVE-2026-53828İstismar yok	OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcementopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Yüksek7,7	—	%0,2	12 Haz 2026
27İzleyin	CVE-2026-53818İstismar yok	OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopbackopenclaw · openclaw · CWE-862 Erişim denetimi (IDOR)	Orta6,9	—	%0,0	11 Haz 2026
19İzleyin	CVE-2026-53809İstismar yok	OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policyopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Orta4,8	—	%0,0	11 Haz 2026
24İzleyin	CVE-2026-53808İstismar yok	OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flowopenclaw · openclaw · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,0	—	%0,1	11 Haz 2026
30İzleyin	CVE-2026-53807İstismar yok	OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFromopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Yüksek7,7	—	%0,3	11 Haz 2026
25İzleyin	CVE-2026-45002İstismar yok	OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mappingopenclaw · openclaw · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,3	—	%0,2	11 May 2026
24İzleyin	CVE-2026-45001İstismar yok	OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Accessopenclaw · openclaw · CWE-862 SSRF Erişim denetimi (IDOR)	Orta6,0	—	%0,2	11 May 2026
25İzleyin	CVE-2026-44999İstismar yok	OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Eventsopenclaw · openclaw · CWE-345 Kimlik doğrulamasız	Orta6,3	—	%0,1	11 May 2026
9İzleyin	CVE-2026-44998İstismar yok	OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Toolsopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Düşük2,3	—	%0,7	11 May 2026
9İzleyin	CVE-2026-44993İstismar yok	OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actionsopenclaw · openclaw · CWE-184	Düşük2,3	—	%0,2	11 May 2026
9İzleyin	CVE-2026-44111İstismar yok	OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_getopenclaw · openclaw · CWE-183	Düşük2,3	—	%0,2	6 May 2026
30İzleyin	CVE-2026-44110İstismar yok	OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Storeopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Yüksek7,7	—	%0,2	6 May 2026
36İzleyin	CVE-2026-43585İstismar yok	OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolutionopenclaw · openclaw · CWE-672 Kimlik doğrulamasız	Kritik9,2	—	%0,5	6 May 2026
24İzleyin	CVE-2026-43583İstismar yok	OpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recoveryopenclaw · openclaw · CWE-862 Erişim denetimi (IDOR)	Orta6,0	—	%0,2	6 May 2026

CVE-2026-53852
9İzleyin
OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairing
DüşükCVSS 2,3İstismar yokEPSS %0
openclaw · openclaw16 Haz 2026
CVE-2026-53850
27İzleyin
OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command
OrtaCVSS 6,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53847
21İzleyin
OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope
OrtaCVSS 5,3İstismar yokEPSS %0
openclaw · openclaw16 Haz 2026
CVE-2026-53844
24İzleyin
OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search
OrtaCVSS 6,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53863
24İzleyin
OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy
OrtaCVSS 6,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53861
21İzleyin
OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS
OrtaCVSS 5,3İstismar yokEPSS %0
- RCE
openclaw · openclaw16 Haz 2026
CVE-2026-53854
24İzleyin
OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands
OrtaCVSS 6,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53845
9İzleyin
OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping
DüşükCVSS 2,3İstismar yokEPSS %0
openclaw · openclaw16 Haz 2026
CVE-2026-53837
25İzleyin
OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers
OrtaCVSS 6,3İstismar yokEPSS %0
- Kimlik doğrulamasız
openclaw · openclaw12 Haz 2026
CVE-2026-53835
9İzleyin
OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings
DüşükCVSS 2,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw12 Haz 2026
CVE-2026-53834
32İzleyin
OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
openclaw · openclaw12 Haz 2026
CVE-2026-53828
30İzleyin
OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement
YüksekCVSS 7,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw12 Haz 2026
CVE-2026-53818
27İzleyin
OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback
OrtaCVSS 6,9İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw11 Haz 2026
CVE-2026-53809
19İzleyin
OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy
OrtaCVSS 4,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw11 Haz 2026
CVE-2026-53808
24İzleyin
OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow
OrtaCVSS 6,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
openclaw · openclaw11 Haz 2026
CVE-2026-53807
30İzleyin
OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom
YüksekCVSS 7,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw11 Haz 2026
CVE-2026-45002
25İzleyin
OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping
OrtaCVSS 6,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
openclaw · openclaw11 May 2026
CVE-2026-45001
24İzleyin
OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access
OrtaCVSS 6,0İstismar yokEPSS %0
- SSRF
- Erişim denetimi (IDOR)
openclaw · openclaw11 May 2026
CVE-2026-44999
25İzleyin
OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events
OrtaCVSS 6,3İstismar yokEPSS %0
- Kimlik doğrulamasız
openclaw · openclaw11 May 2026
CVE-2026-44998
9İzleyin
OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools
DüşükCVSS 2,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw11 May 2026
CVE-2026-44993
9İzleyin
OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions
DüşükCVSS 2,3İstismar yokEPSS %0
openclaw · openclaw11 May 2026
CVE-2026-44111
9İzleyin
OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get
DüşükCVSS 2,3İstismar yokEPSS %0
openclaw · openclaw6 May 2026
CVE-2026-44110
30İzleyin
OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store
YüksekCVSS 7,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw6 May 2026
CVE-2026-43585
36İzleyin
OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution
KritikCVSS 9,2İstismar yokEPSS %0
- Kimlik doğrulamasız
openclaw · openclaw6 May 2026
CVE-2026-43583
24İzleyin
OpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recovery
OrtaCVSS 6,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw6 May 2026