Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 1921–1940 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100552

OpenClaw before 2026.8.1 Policy Bypass via Native Tools

OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a lower-trust conversation…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:47.510Z. Updated 2026-09-30T00:22:43.390Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:22 WIB

Official record

CritPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100551

OpenClaw iOS Control UI TLS Pin Enforcement Bypass

OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI. While native connections enforced the saved Gateway fingerprint, the authenticated Terminal and session Dashboard WebViews omitted it. If a user had accepted a Gateway fingerprint, an attacker able to redirect…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1921 to 1940 of 14934.First page Next page

Published 2026-09-26T02:18:46.612Z. Updated 2026-10-05T14:55:03.956Z.

CVSS9v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100550

OpenClaw before 2026.8.1 Authentication Bypass via Access Group

OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admission check, so a Teams m…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:45.885Z. Updated 2026-09-28T17:33:57.811Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:33 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100549

OpenClaw before 2026.8.1 Path Traversal via QQBot voice filenames

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded traversal segments to reappear after sanitization. Attackers can supply crafted voice attachments that write files outside the intended staging directory to oth…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:45.168Z. Updated 2026-09-29T17:11:08.601Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:11 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100548

OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback

OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential exposure issue in memory embedding failover. When remote embedding fallback is configured and the primary embedding provider fails, the request can be sent to a different fallback provider while still reusing the primary provide…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:43.935Z. Updated 2026-09-30T00:22:11.100Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:22 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100547

OpenClaw before 2026.8.1 Authentication Bypass via File URL

OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2), alternate but valid `file:` URL spellings supplied over the Agent Client Protocol (ACP) were treated as relative paths and were incorrectly classified as reads scoped to the session working directory.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:43.254Z. Updated 2026-10-05T14:55:04.077Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100546

OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript

OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent control-classified voice transcripts could consume speaker context belonging to another participant after an asynchronous control check, causing a transcript to inheri…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:42.608Z. Updated 2026-09-28T17:46:37.422Z.

CVSS6.1v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:46 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100545

OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation

OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filename generation was e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:41.920Z. Updated 2026-09-29T17:12:44.905Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:12 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100544

openclaw voice-call before 2026.8.1 Authorization Bypass

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller. A caller who is admit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:41.249Z. Updated 2026-10-08T15:21:47.105Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:21 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100543

OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash

OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as offline password verif…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:40.572Z. Updated 2026-10-05T14:55:04.226Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

LowPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100542

OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2

OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained listings so that ent…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:39.901Z. Updated 2026-09-28T17:45:49.475Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:45 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100541

OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Folding

OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase complete Matrix user IDs — including historical localparts and the case-sensitive server-name portion — when deriving the OpenClaw authorization identity. As a result, distinct authenticated Matrix accounts can no…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:39.224Z. Updated 2026-10-08T15:21:45.988Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:21 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100540

OpenClaw Feishu before 2026.8.1 Authentication Bypass via Disabled Account

OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can exploit multi-account setups where a disabled default account retains credentials to read or modify Feishu resources through a revoked identity.

Excerpt language: en.

Severity high: primary CNA CVSS 7.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:38.549Z. Updated 2026-10-08T15:21:45.390Z.

CVSS7.6v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:21 WIB

Official record

LowPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100539

OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search and memory_get tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit disablement like an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:37.870Z. Updated 2026-10-05T14:55:04.358Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100538

OpenClaw before 2026.8.1 Local File Read via Outbound Attachments

OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a final-response media dire…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:37.196Z. Updated 2026-09-28T17:44:58.113Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:44 WIB

Official record

LowPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100537

OpenClaw before 2026.8.1 Authentication Bypass via Active Memory

OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it int…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:36.522Z. Updated 2026-09-29T17:14:15.316Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:14 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100536

OpenClaw before 2026.8.1 Path Traversal via Structured Attachments

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause Telegram delivery to rea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:35.827Z. Updated 2026-09-30T00:18:47.510Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:18 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100535

OpenClaw before 2026.8.1 Privilege Escalation via Session Memory

OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender whose messages are…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:35.149Z. Updated 2026-10-05T14:55:04.493Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

LowPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100534

OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's configured authority.

Excerpt language: en.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:34.477Z. Updated 2026-09-28T17:43:08.927Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:43 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100533

OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize validated parent directory components. Admitted requesters can exploit canonically equivalent sibling directories to read files outside the configured workspace bo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:33.802Z. Updated 2026-09-29T17:15:49.580Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:15 WIB

Official record