# Vulnerabilities published in 2026


- [CVE-2026-100617](https://insights.sbomify.com/CVE-2026-100617/): Cap-go capgo.app Authorization Bypass via channel_permission_overrides (high 8.7)
- [CVE-2026-100616](https://insights.sbomify.com/CVE-2026-100616/): capgo.app Authentication Bypass via PostgREST customer_id Mutation (high 7.0)
- [CVE-2026-100615](https://insights.sbomify.com/CVE-2026-100615/): Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation (high 8.7)
- [CVE-2026-100614](https://insights.sbomify.com/CVE-2026-100614/): Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker (high 8.7)
- [CVE-2026-100613](https://insights.sbomify.com/CVE-2026-100613/): capgo.app Authorization Bypass via Stale Channel Permission Overrides (medium 6.0)
- [CVE-2026-100612](https://insights.sbomify.com/CVE-2026-100612/): Capgo SSO Provider ID Authentication Bypass via Incomplete Migration (high 8.6)
- [CVE-2026-100611](https://insights.sbomify.com/CVE-2026-100611/): Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-list (high 7.1)
- [CVE-2026-100610](https://insights.sbomify.com/CVE-2026-100610/): Flowise through 3.1.4 Missing Authorization via upsert-history (high 7.7)
- [CVE-2026-10061](https://insights.sbomify.com/CVE-2026-10061/): TRENDnet TEW-432BRP formWPS command injection (medium 5.3)
- [CVE-2026-100609](https://insights.sbomify.com/CVE-2026-100609/): Flowise through 3.1.4 Insecure Direct Object Reference via Credential (high 7.6)
- [CVE-2026-100608](https://insights.sbomify.com/CVE-2026-100608/): Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard (high 8.7)
- [CVE-2026-100607](https://insights.sbomify.com/CVE-2026-100607/): Flowise through 3.1.4 Authentication Bypass via Email-Only SSO (critical 9.2)
- [CVE-2026-100606](https://insights.sbomify.com/CVE-2026-100606/): Flowise through 3.1.4 Authentication Bypass via SSO Email Match (critical 9.2)
- [CVE-2026-100605](https://insights.sbomify.com/CVE-2026-100605/): Flowise through 3.1.4 Missing Authorization via Chat Message Routes (high 7.5)
- [CVE-2026-100604](https://insights.sbomify.com/CVE-2026-100604/): ClawHub Authentication Bypass via Former Publisher Skill Control (medium 5.3)
- [CVE-2026-100603](https://insights.sbomify.com/CVE-2026-100603/): ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports (high 8.7)
- [CVE-2026-100602](https://insights.sbomify.com/CVE-2026-100602/): ClawHub Changelog Preview Information Disclosure via Authorization Bypass (high 7.1)
- [CVE-2026-100601](https://insights.sbomify.com/CVE-2026-100601/): ClawHub SSRF via Unchecked DNS Resolution in Profile Image (medium 6.9)
- [CVE-2026-100600](https://insights.sbomify.com/CVE-2026-100600/): ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API (medium 6.9)
- [CVE-2026-10060](https://insights.sbomify.com/CVE-2026-10060/): TRENDnet TEW-432BRP formSetRoute command injection (medium 5.3)
- [CVE-2026-100599](https://insights.sbomify.com/CVE-2026-100599/): OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome (high 8.7)
- [CVE-2026-100598](https://insights.sbomify.com/CVE-2026-100598/): OpenClaw before 2026.7.1 Approval Binding Logic Error (high 7.5)
- [CVE-2026-100597](https://insights.sbomify.com/CVE-2026-100597/): OpenClaw before 2026.7.1 Path Traversal via Filesystem Race (high 8.8)
- [CVE-2026-100596](https://insights.sbomify.com/CVE-2026-100596/): OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration (high 8.7)
- [CVE-2026-100595](https://insights.sbomify.com/CVE-2026-100595/): OpenClaw before 2026.7.1 Authorization Bypass via diagnostics (high 7.1)
- [CVE-2026-100594](https://insights.sbomify.com/CVE-2026-100594/): OpenClaw before 2026.7.1 Authorization Bypass via trajectory export (high 7.1)
- [CVE-2026-100593](https://insights.sbomify.com/CVE-2026-100593/): OpenClaw before 2026.7.1 Authentication Bypass via activation (medium 5.3)
- [CVE-2026-100592](https://insights.sbomify.com/CVE-2026-100592/): OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming (medium 5.3)
- [CVE-2026-100591](https://insights.sbomify.com/CVE-2026-100591/): OpenClaw before 2026.7.1 Authentication Bypass via Active Memory (medium 5.3)
- [CVE-2026-100590](https://insights.sbomify.com/CVE-2026-100590/): OpenClaw before 2026.7.1 Authorization Bypass via voice set (medium 5.3)
- [CVE-2026-10059](https://insights.sbomify.com/CVE-2026-10059/): Privilege escalation in multicluster engine for Kubernetes 2.1 (critical 9.1)
- [CVE-2026-100589](https://insights.sbomify.com/CVE-2026-100589/): OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node (high 8.7)
- [CVE-2026-100588](https://insights.sbomify.com/CVE-2026-100588/): OpenClaw before 2026.7.1 Authentication Bypass via node.invoke (high 8.7)
- [CVE-2026-100587](https://insights.sbomify.com/CVE-2026-100587/): OpenClaw before 2026.7.1 Authorization Bypass via Codex Install (high 8.7)
- [CVE-2026-100586](https://insights.sbomify.com/CVE-2026-100586/): OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind (high 8.7)
- [CVE-2026-100585](https://insights.sbomify.com/CVE-2026-100585/): OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel (high 8.6)
- [CVE-2026-100584](https://insights.sbomify.com/CVE-2026-100584/): OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows (medium 5.4)
- [CVE-2026-100583](https://insights.sbomify.com/CVE-2026-100583/): OpenClaw Discord before 2026.7.1 Authorization Bypass (medium 5.3)
- [CVE-2026-100582](https://insights.sbomify.com/CVE-2026-100582/): OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass (high 7.1)
- [CVE-2026-100581](https://insights.sbomify.com/CVE-2026-100581/): OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension (medium 6.8)
- [CVE-2026-100580](https://insights.sbomify.com/CVE-2026-100580/): OpenClaw before 2026.7.1 Remote Code Execution via cron tool (high 8.7)
- [CVE-2026-10058](https://insights.sbomify.com/CVE-2026-10058/): ITP Technology｜ITS Intelligent SCADA System - Stored Cross-Site Scripting (medium 4.8)
- [CVE-2026-100579](https://insights.sbomify.com/CVE-2026-100579/): OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester (high 7.2)
- [CVE-2026-100578](https://insights.sbomify.com/CVE-2026-100578/): OpenClaw before 2026.7.1 Authorization Bypass via chat.send (high 7.2)
- [CVE-2026-100577](https://insights.sbomify.com/CVE-2026-100577/): OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset (medium 5.3)
- [CVE-2026-100576](https://insights.sbomify.com/CVE-2026-100576/): OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates (medium 5.3)
- [CVE-2026-100575](https://insights.sbomify.com/CVE-2026-100575/): OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM (high 8.7)
- [CVE-2026-100574](https://insights.sbomify.com/CVE-2026-100574/): OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS (high 8.2)
- [CVE-2026-100573](https://insights.sbomify.com/CVE-2026-100573/): OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback (medium 4.8)
- [CVE-2026-100572](https://insights.sbomify.com/CVE-2026-100572/): OpenClaw before 2026.8.1 Denial of Service via Rate Limit (medium 6.9)
- [CVE-2026-100571](https://insights.sbomify.com/CVE-2026-100571/): OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass (medium 6.9)
- [CVE-2026-100570](https://insights.sbomify.com/CVE-2026-100570/): OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS (high 8.5)
- [CVE-2026-10057](https://insights.sbomify.com/CVE-2026-10057/): ITP Technology｜ITS Intelligent SCADA System - Stored Cross-Site Scripting (medium 4.8)
- [CVE-2026-100569](https://insights.sbomify.com/CVE-2026-100569/): OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override (medium 6.8)
- [CVE-2026-100568](https://insights.sbomify.com/CVE-2026-100568/): OpenClaw before 2026.8.1 Unauthorized Command Job Access (high 8.7)
- [CVE-2026-100567](https://insights.sbomify.com/CVE-2026-100567/): OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname (high 8.9)
- [CVE-2026-100566](https://insights.sbomify.com/CVE-2026-100566/): OpenClaw LINE before 2026.8.1 Access Control Inheritance (medium 6.9)
- [CVE-2026-100564](https://insights.sbomify.com/CVE-2026-100564/): OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export (medium 5.3)
- [CVE-2026-100563](https://insights.sbomify.com/CVE-2026-100563/): OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels (medium 5.3)
- [CVE-2026-100562](https://insights.sbomify.com/CVE-2026-100562/): OpenClaw before 2026.8.1 Authorization Bypass via sessions.create (medium 5.3)
- [CVE-2026-100561](https://insights.sbomify.com/CVE-2026-100561/): OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper (high 8.6)
- [CVE-2026-100560](https://insights.sbomify.com/CVE-2026-100560/): OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass (high 7.7)
- [CVE-2026-10056](https://insights.sbomify.com/CVE-2026-10056/): CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request (high 7.5)
- [CVE-2026-100559](https://insights.sbomify.com/CVE-2026-100559/): OpenClaw before 2026.8.1 Command Injection via Escaped Newlines (high 8.6)
- [CVE-2026-100558](https://insights.sbomify.com/CVE-2026-100558/): OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade (high 8.7)
- [CVE-2026-100557](https://insights.sbomify.com/CVE-2026-100557/): OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch (high 8.7)
- [CVE-2026-100556](https://insights.sbomify.com/CVE-2026-100556/): OpenClaw before 2026.8.1 Authentication Bypass via Session Reset (medium 5.3)
- [CVE-2026-100555](https://insights.sbomify.com/CVE-2026-100555/): OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery (high 7.1)
- [CVE-2026-100554](https://insights.sbomify.com/CVE-2026-100554/): OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass (low 2.3)
- [CVE-2026-100553](https://insights.sbomify.com/CVE-2026-100553/): OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin (medium 5.3)
- [CVE-2026-100552](https://insights.sbomify.com/CVE-2026-100552/): OpenClaw before 2026.8.1 Policy Bypass via Native Tools (high 8.7)
- [CVE-2026-100551](https://insights.sbomify.com/CVE-2026-100551/): OpenClaw iOS Control UI TLS Pin Enforcement Bypass (critical 9.0)
- [CVE-2026-100550](https://insights.sbomify.com/CVE-2026-100550/): OpenClaw before 2026.8.1 Authentication Bypass via Access Group (medium 5.3)
- [CVE-2026-10055](https://insights.sbomify.com/CVE-2026-10055/): Server-side request forgery in Eclipse Theia (high 8.5)
- [CVE-2026-100549](https://insights.sbomify.com/CVE-2026-100549/): OpenClaw before 2026.8.1 Path Traversal via QQBot voice filenames (medium 5.3)
- [CVE-2026-100548](https://insights.sbomify.com/CVE-2026-100548/): OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback (medium 6.0)
- [CVE-2026-100547](https://insights.sbomify.com/CVE-2026-100547/): OpenClaw before 2026.8.1 Authentication Bypass via File URL (medium 6.8)
- [CVE-2026-100546](https://insights.sbomify.com/CVE-2026-100546/): OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript (medium 6.1)
- [CVE-2026-100545](https://insights.sbomify.com/CVE-2026-100545/): OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation (medium 6.0)
- [CVE-2026-100544](https://insights.sbomify.com/CVE-2026-100544/): openclaw voice-call before 2026.8.1 Authorization Bypass (high 8.7)
- [CVE-2026-100543](https://insights.sbomify.com/CVE-2026-100543/): OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash (high 7.7)
- [CVE-2026-100542](https://insights.sbomify.com/CVE-2026-100542/): OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2 (low 2.3)
- [CVE-2026-100541](https://insights.sbomify.com/CVE-2026-100541/): OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Folding (high 7.7)
- [CVE-2026-100540](https://insights.sbomify.com/CVE-2026-100540/): OpenClaw Feishu before 2026.8.1 Authentication Bypass via Disabled Account (high 7.6)
- [CVE-2026-10054](https://insights.sbomify.com/CVE-2026-10054/): Missing authorization in Eclipse Theia (high 8.8)
- [CVE-2026-100539](https://insights.sbomify.com/CVE-2026-100539/): OpenClaw before 2026.8.1 Memory Access Control Bypass (low 2.1)
- [CVE-2026-100538](https://insights.sbomify.com/CVE-2026-100538/): OpenClaw before 2026.8.1 Local File Read via Outbound Attachments (high 7.1)
- [CVE-2026-100537](https://insights.sbomify.com/CVE-2026-100537/): OpenClaw before 2026.8.1 Authentication Bypass via Active Memory (low 2.3)
- [CVE-2026-100536](https://insights.sbomify.com/CVE-2026-100536/): OpenClaw before 2026.8.1 Path Traversal via Structured Attachments (high 7.1)
- [CVE-2026-100535](https://insights.sbomify.com/CVE-2026-100535/): OpenClaw before 2026.8.1 Privilege Escalation via Session Memory (high 7.7)
- [CVE-2026-100534](https://insights.sbomify.com/CVE-2026-100534/): OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass (low 2.3)
- [CVE-2026-100533](https://insights.sbomify.com/CVE-2026-100533/): OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback (medium 6.0)
- [CVE-2026-100532](https://insights.sbomify.com/CVE-2026-100532/): openclaw WhatsApp before 2026.8.1 Authentication Bypass (high 7.2)
- [CVE-2026-100531](https://insights.sbomify.com/CVE-2026-100531/): openclaw Slack before 2026.8.1 Authorization Bypass (high 7.1)
- [CVE-2026-100530](https://insights.sbomify.com/CVE-2026-100530/): OpenClaw before 2026.8.1 Exec Approval Directory Binding (high 8.5)
- [CVE-2026-10053](https://insights.sbomify.com/CVE-2026-10053/): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab (high 8.5)
- [CVE-2026-100529](https://insights.sbomify.com/CVE-2026-100529/): OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer (high 7.4)
- [CVE-2026-100528](https://insights.sbomify.com/CVE-2026-100528/): OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint (medium 5.9)
- [CVE-2026-100527](https://insights.sbomify.com/CVE-2026-100527/): OpenClaw before 2026.8.2 Denial of Service via Browser Relay (medium 6.9)
- [CVE-2026-100526](https://insights.sbomify.com/CVE-2026-100526/): Vulnerability in discord (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/1002/