Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 1881–1900 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100593

OpenClaw before 2026.7.1 Authentication Bypass via activation

OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent `/activation` policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond more broadly in the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:14.958Z. Updated 2026-09-30T00:29:57.075Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:29 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100592

OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming

OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable the Gateway's Memory…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1881 to 1900 of 14934.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:14.301Z. Updated 2026-10-05T14:55:02.499Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100591

OpenClaw before 2026.7.1 Authentication Bypass via Active Memory

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for future sessions or re-en…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:13.657Z. Updated 2026-09-28T17:29:45.302Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:29 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100590

OpenClaw before 2026.7.1 Authorization Bypass via voice set

OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gateway voice configuration. Attackers with command access can change the voice used by Talk responses for the configured provider, affecting configuration integrit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:12.994Z. Updated 2026-09-28T19:24:36.146Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 02:24 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100589

OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform host browser operations, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:12.328Z. Updated 2026-09-30T00:29:16.072Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:29 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100588

OpenClaw before 2026.7.1 Authentication Bypass via node.invoke

OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.invoke method, although direct browser.request access requires administrator scope. In Gateway deployments that honor caller identity and narrower operator scopes…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:11.643Z. Updated 2026-10-05T14:55:02.636Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100587

OpenClaw before 2026.7.1 Authorization Bypass via Codex Install

OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and availability.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:10.955Z. Updated 2026-09-28T17:30:20.127Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:30 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100586

OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind

OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bindings to the native Codex runtime and execute host-capable turns with access to files, tools, and processes.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:10.286Z. Updated 2026-09-28T19:29:47.227Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 02:29 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100585

OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel

OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered through the MCP channel bridge. An authorized non-owner channel sender with channel command access can approve or deny a pending permission request intended for the ow…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:09.595Z. Updated 2026-09-30T00:28:44.239Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:28 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100584

OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows

OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory. If lower-trust cont…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:08.823Z. Updated 2026-10-05T14:55:02.786Z.

CVSS5.4v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100583

OpenClaw Discord before 2026.7.1 Authorization Bypass

OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to retrieve information excluded by channel allowlists. Attackers can bypass the configured Discord read-target policy to access guild metadata from servers or channels …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:08.137Z. Updated 2026-10-08T15:21:51.055Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:21 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100582

OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass

OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and related metadata read actions. A lower-trust sender or a steere…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:07.452Z. Updated 2026-10-08T15:21:50.196Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:21 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100581

OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension

OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device backups or extracted App Group containers can recover valid Gateway tokens and passwords to authenticate with operator authority.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:06.796Z. Updated 2026-09-30T00:27:46.423Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:27 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100580

OpenClaw before 2026.7.1 Remote Code Execution via cron tool

OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a persistent cron job th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:06.136Z. Updated 2026-10-05T14:55:02.909Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100579

OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester

OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message.action. In identity-bearing Gateway deployments (authentication modes that honor caller identity and narrower operator scopes), a write-scoped caller can supply another sender's identifier to the channel authorization c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:05.472Z. Updated 2026-09-28T17:31:43.702Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:31 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100578

OpenClaw before 2026.7.1 Authorization Bypass via chat.send

OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure tools exposed through the chat.send endpoint. In Gateway deployments using authentication modes that honor caller identity and narrower operator scopes, a write-scoped non-owner caller can start a chat turn whose tool inventor…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:04.806Z. Updated 2026-09-28T19:34:23.662Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 02:34 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100577

OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the OpenClaw host.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:04.179Z. Updated 2026-09-30T00:27:11.389Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:27 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100576

OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or private destinations wit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:03.527Z. Updated 2026-10-05T14:55:03.097Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100575

OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:02.877Z. Updated 2026-10-08T15:21:48.531Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:21 WIB

Official record

HighPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100574

OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS

OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks. For fetches that use the trusted-host DNS recheck, a trusted hostname that resolves to an unspecified address (0.0.0.0 or ::) bypasses the SSRF destination validation. An attacker who c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:02.238Z. Updated 2026-09-29T16:55:39.389Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 23:55 WIB

Official record