# Vulnerabilities published in 2026


- [CVE-2026-53851](https://insights.sbomify.com/CVE-2026-53851/): OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass (medium 6.3)
- [CVE-2026-53850](https://insights.sbomify.com/CVE-2026-53850/): OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command (medium 6.8)
- [CVE-2026-5385](https://insights.sbomify.com/CVE-2026-5385/): GLPI 11.0.0 - Stored XSS in knowledge base (high 8.4)
- [CVE-2026-53849](https://insights.sbomify.com/CVE-2026-53849/): OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom (high 8.6)
- [CVE-2026-53848](https://insights.sbomify.com/CVE-2026-53848/): OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers (low 2.3)
- [CVE-2026-53847](https://insights.sbomify.com/CVE-2026-53847/): OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope (medium 5.3)
- [CVE-2026-53846](https://insights.sbomify.com/CVE-2026-53846/): OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpath (high 7.0)
- [CVE-2026-53845](https://insights.sbomify.com/CVE-2026-53845/): OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping (low 2.3)
- [CVE-2026-53844](https://insights.sbomify.com/CVE-2026-53844/): OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search (medium 6.0)
- [CVE-2026-53843](https://insights.sbomify.com/CVE-2026-53843/): OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session (high 8.7)
- [CVE-2026-53842](https://insights.sbomify.com/CVE-2026-53842/): OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable (high 7.0)
- [CVE-2026-53841](https://insights.sbomify.com/CVE-2026-53841/): OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML (low 2.1)
- [CVE-2026-53840](https://insights.sbomify.com/CVE-2026-53840/): OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects (medium 6.0)
- [CVE-2026-5384](https://insights.sbomify.com/CVE-2026-5384/): runZero Platform incorrect credential scope (medium 5.8)
- [CVE-2026-53839](https://insights.sbomify.com/CVE-2026-53839/): OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation (medium 6.0)
- [CVE-2026-53838](https://insights.sbomify.com/CVE-2026-53838/): OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection (medium 6.0)
- [CVE-2026-53837](https://insights.sbomify.com/CVE-2026-53837/): OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers (medium 6.3)
- [CVE-2026-53836](https://insights.sbomify.com/CVE-2026-53836/): OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases (high 8.7)
- [CVE-2026-53835](https://insights.sbomify.com/CVE-2026-53835/): OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings (low 2.3)
- [CVE-2026-53834](https://insights.sbomify.com/CVE-2026-53834/): OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands (high 8.2)
- [CVE-2026-53833](https://insights.sbomify.com/CVE-2026-53833/): QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command (high 7.4)
- [CVE-2026-53832](https://insights.sbomify.com/CVE-2026-53832/): OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration (high 7.4)
- [CVE-2026-53831](https://insights.sbomify.com/CVE-2026-53831/): OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist (high 7.6)
- [CVE-2026-53830](https://insights.sbomify.com/CVE-2026-53830/): OpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload (medium 6.0)
- [CVE-2026-5383](https://insights.sbomify.com/CVE-2026-5383/): runZero Explorer missing authorization check (medium 4.4)
- [CVE-2026-53829](https://insights.sbomify.com/CVE-2026-53829/): OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display (high 8.5)
- [CVE-2026-53828](https://insights.sbomify.com/CVE-2026-53828/): OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement (high 7.7)
- [CVE-2026-53827](https://insights.sbomify.com/CVE-2026-53827/): OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding (medium 6.0)
- [CVE-2026-53826](https://insights.sbomify.com/CVE-2026-53826/): OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn (low 2.3)
- [CVE-2026-53825](https://insights.sbomify.com/CVE-2026-53825/): OpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope (high 7.1)
- [CVE-2026-53824](https://insights.sbomify.com/CVE-2026-53824/): Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay (medium 6.0)
- [CVE-2026-53823](https://insights.sbomify.com/CVE-2026-53823/): OpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom (high 8.6)
- [CVE-2026-53822](https://insights.sbomify.com/CVE-2026-53822/): OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution (high 8.7)
- [CVE-2026-53821](https://insights.sbomify.com/CVE-2026-53821/): OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket (high 8.7)
- [CVE-2026-53820](https://insights.sbomify.com/CVE-2026-53820/): OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn (medium 6.9)
- [CVE-2026-5382](https://insights.sbomify.com/CVE-2026-5382/): runZero Platform MCP endpoint information leak (low 3.0)
- [CVE-2026-53819](https://insights.sbomify.com/CVE-2026-53819/): OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override (high 8.7)
- [CVE-2026-53818](https://insights.sbomify.com/CVE-2026-53818/): OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback (medium 6.9)
- [CVE-2026-53817](https://insights.sbomify.com/CVE-2026-53817/): OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing (high 8.7)
- [CVE-2026-53816](https://insights.sbomify.com/CVE-2026-53816/): OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node (high 8.6)
- [CVE-2026-53815](https://insights.sbomify.com/CVE-2026-53815/): OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions (high 7.1)
- [CVE-2026-53814](https://insights.sbomify.com/CVE-2026-53814/): OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority (high 8.7)
- [CVE-2026-53813](https://insights.sbomify.com/CVE-2026-53813/): OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution (high 7.3)
- [CVE-2026-53812](https://insights.sbomify.com/CVE-2026-53812/): OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions (medium 4.9)
- [CVE-2026-53811](https://insights.sbomify.com/CVE-2026-53811/): OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom (high 7.7)
- [CVE-2026-53810](https://insights.sbomify.com/CVE-2026-53810/): OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata (high 7.7)
- [CVE-2026-5381](https://insights.sbomify.com/CVE-2026-5381/): runZero Platform task information leak (low 2.2)
- [CVE-2026-53809](https://insights.sbomify.com/CVE-2026-53809/): OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy (medium 4.8)
- [CVE-2026-53808](https://insights.sbomify.com/CVE-2026-53808/): OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow (medium 6.0)
- [CVE-2026-53807](https://insights.sbomify.com/CVE-2026-53807/): OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom (high 7.7)
- [CVE-2026-53806](https://insights.sbomify.com/CVE-2026-53806/): OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation (high 7.7)
- [CVE-2026-53805](https://insights.sbomify.com/CVE-2026-53805/): NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API (critical 9.3)
- [CVE-2026-53804](https://insights.sbomify.com/CVE-2026-53804/): OTRS Community Edition OS Command Injection via PGP Configuration (high 8.6)
- [CVE-2026-53803](https://insights.sbomify.com/CVE-2026-53803/): rsync < 3.5.0 Symlink Following Arbitrary File Overwrite (high 8.5)
- [CVE-2026-53802](https://insights.sbomify.com/CVE-2026-53802/): rsync < 3.5.0 Arbitrary File Read via Symlink Following (high 8.4)
- [CVE-2026-53801](https://insights.sbomify.com/CVE-2026-53801/): rsync < 3.5.0 Symlink Race Condition Directory Traversal (high 8.2)
- [CVE-2026-53800](https://insights.sbomify.com/CVE-2026-53800/): rsync < 3.5.0 Symlink Race Condition via --remove-source-files (medium 5.7)
- [CVE-2026-5380](https://insights.sbomify.com/CVE-2026-5380/): runZero Platform cleartext secret exposure (medium 5.3)
- [CVE-2026-53799](https://insights.sbomify.com/CVE-2026-53799/): rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application (high 7.2)
- [CVE-2026-53798](https://insights.sbomify.com/CVE-2026-53798/): rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping (medium 6.9)
- [CVE-2026-53797](https://insights.sbomify.com/CVE-2026-53797/): rsync < 3.5.0 Symlink Race Condition Information Disclosure (medium 5.7)
- [CVE-2026-53796](https://insights.sbomify.com/CVE-2026-53796/): rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling (medium 5.8)
- [CVE-2026-53795](https://insights.sbomify.com/CVE-2026-53795/): rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest (high 7.2)
- [CVE-2026-53794](https://insights.sbomify.com/CVE-2026-53794/): rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error (medium 6.9)
- [CVE-2026-53793](https://insights.sbomify.com/CVE-2026-53793/): rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (critical 9.1)
- [CVE-2026-53792](https://insights.sbomify.com/CVE-2026-53792/): rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block (high 7.1)
- [CVE-2026-53791](https://insights.sbomify.com/CVE-2026-53791/): rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (critical 9.1)
- [CVE-2026-53790](https://insights.sbomify.com/CVE-2026-53790/): rsync < 3.5.0 Command Injection via Multiple Code Paths (critical 9.2)
- [CVE-2026-5379](https://insights.sbomify.com/CVE-2026-5379/): runZero Platform MCP certification information leak (low 3.0)
- [CVE-2026-53789](https://insights.sbomify.com/CVE-2026-53789/): rsync < 3.5.0 Arbitrary File Deletion via Malicious File List (high 7.1)
- [CVE-2026-53788](https://insights.sbomify.com/CVE-2026-53788/): rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping (medium 6.9)
- [CVE-2026-53787](https://insights.sbomify.com/CVE-2026-53787/): Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File Upload (critical 9.3)
- [CVE-2026-53786](https://insights.sbomify.com/CVE-2026-53786/): rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive (medium 6.9)
- [CVE-2026-53785](https://insights.sbomify.com/CVE-2026-53785/): rsync < 3.5.0 Path Traversal Write Escape via --relative Mode (medium 6.9)
- [CVE-2026-53784](https://insights.sbomify.com/CVE-2026-53784/): rsync < 3.5.0 Path Traversal via Symlink Module Root (high 8.4)
- [CVE-2026-53783](https://insights.sbomify.com/CVE-2026-53783/): rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync (high 8.6)
- [CVE-2026-53782](https://insights.sbomify.com/CVE-2026-53782/): Summarize < 0.17.0 SSRF via podcast:transcript URL fetch (medium 6.3)
- [CVE-2026-53781](https://insights.sbomify.com/CVE-2026-53781/): Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download (medium 5.3)
- [CVE-2026-5378](https://insights.sbomify.com/CVE-2026-5378/): runZero Platform user creation leak (medium 5.8)
- [CVE-2026-53779](https://insights.sbomify.com/CVE-2026-53779/): WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows (high 8.7)
- [CVE-2026-53777](https://insights.sbomify.com/CVE-2026-53777/): Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket (high 8.6)
- [CVE-2026-53776](https://insights.sbomify.com/CVE-2026-53776/): Perry < 0.5.1166 JWT Expiration Bypass via verify_decode (critical 9.3)
- [CVE-2026-5377](https://insights.sbomify.com/CVE-2026-5377/): Incorrect Authorization in GitLab (medium 4.3)
- [CVE-2026-53769](https://insights.sbomify.com/CVE-2026-53769/): Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy (medium 6.5)
- [CVE-2026-53766](https://insights.sbomify.com/CVE-2026-53766/): chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots (medium 6.1)
- [CVE-2026-53765](https://insights.sbomify.com/CVE-2026-53765/): chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory (medium 6.1)
- [CVE-2026-53763](https://insights.sbomify.com/CVE-2026-53763/): OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee (low 3.8)
- [CVE-2026-53762](https://insights.sbomify.com/CVE-2026-53762/): VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds) (medium 6.2)
- [CVE-2026-53761](https://insights.sbomify.com/CVE-2026-53761/): Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api (high 8.2)
- [CVE-2026-53760](https://insights.sbomify.com/CVE-2026-53760/): Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests (medium 5.2)
- [CVE-2026-5376](https://insights.sbomify.com/CVE-2026-5376/): runZero Platform session timeout failure (medium 5.9)
- [CVE-2026-53759](https://insights.sbomify.com/CVE-2026-53759/): linuxfabrik-lib: Insecure creation of SQLite databases (low 2.0)
- [CVE-2026-53758](https://insights.sbomify.com/CVE-2026-53758/): Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized (high 8.7)
- [CVE-2026-53757](https://insights.sbomify.com/CVE-2026-53757/): Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE (medium 6.9)
- [CVE-2026-53756](https://insights.sbomify.com/CVE-2026-53756/): Emlog Blind SQL Injection via Authentication Cookie (medium 4.9)
- [CVE-2026-53755](https://insights.sbomify.com/CVE-2026-53755/): Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check (high 8.6)
- [CVE-2026-53754](https://insights.sbomify.com/CVE-2026-53754/): Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped) (high 7.5)
- [CVE-2026-53753](https://insights.sbomify.com/CVE-2026-53753/): Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API (critical 9.8)
- [CVE-2026-53752](https://insights.sbomify.com/CVE-2026-53752/): docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service (high 7.5)
- [CVE-2026-53751](https://insights.sbomify.com/CVE-2026-53751/): DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE) (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/557/