Publish Advisories

GHSA-3hcm-ggvf-rch5
GHSA-5xfq-5mr7-426q
GHSA-c37p-4qqg-3p76
GHSA-jqpq-mgvm-f9r6
GHSA-mj5r-hh7j-4gxf
GHSA-mqpw-46fh-299h
GHSA-mr32-vwc2-5j6h
GHSA-pg2v-8xwh-qhcc
GHSA-rq6g-px6m-c248
GHSA-w2cg-vxx6-5xjg
GHSA-xvhf-x56f-2hpp

Author: advisory-database[bot]

advisories/github-reviewed/2026/02/GHSA-3hcm-ggvf-rch5/GHSA-3hcm-ggvf-rch5.json

@@ -1,14 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3hcm-ggvf-rch5",
-  "modified": "2026-03-05T21:50:40Z",
+  "modified": "2026-03-06T01:02:32Z",
   "published": "2026-02-17T16:46:12Z",
   "aliases": [
     "CVE-2026-28470"
   ],
   "summary": "OpenClaw has an exec allowlist bypass via command substitution/backticks inside double quotes",
   "details": "### Summary\n\nExec approvals allowlist bypass via command substitution/backticks inside double quotes.\n\n### Affected Packages / Versions\n\n- Package: `openclaw` (npm)\n- Affected: `<= 2026.2.1`\n- Fixed: `>= 2026.2.2`\n\n### Impact\n\nOnly affects setups that explicitly enable the optional exec approvals allowlist feature. Default installs are unaffected.\n\n### Fix\n\nReject unescaped `$()` and backticks inside double quotes during allowlist analysis.\n\n### Fix Commit(s)\n\n- d1ecb46076145deb188abcba8f0699709ea17198\n\nThanks @simecek for reporting.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
@@ -40,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-3hcm-ggvf-rch5"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28470"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/commit/d1ecb46076145deb188abcba8f0699709ea17198"
@@ -51,15 +59,20 @@
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-command-substitution-in-double-quotes"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-78"
+      "CWE-78",
+      "CWE-88"
     ],
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-02-17T16:46:12Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-03-05T22:16:20Z"
   }
 }

advisories/github-reviewed/2026/02/GHSA-5xfq-5mr7-426q/GHSA-5xfq-5mr7-426q.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5xfq-5mr7-426q",
-  "modified": "2026-03-05T21:55:03Z",
+  "modified": "2026-03-06T01:04:31Z",
   "published": "2026-02-18T00:57:30Z",
   "aliases": [
     "CVE-2026-28482"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,26 +44,38 @@
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-5xfq-5mr7-426q"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28482"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/commit/4199f9889f0c307b77096a229b9e085b8d856c26"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openclaw/openclaw/commit/cab0abf52ac91e12ea7a0cf04fff315cf0c94d64"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/openclaw/openclaw"
     },
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.12"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulncheck.com/advisories/openclaw-path-traversal-via-unsanitized-sessionid-and-sessionfile-parameters"
     }
   ],
   "database_specific": {
     "cwe_ids": [
       "CWE-22"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-02-18T00:57:30Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-03-05T22:16:23Z"
   }
 }

advisories/github-reviewed/2026/02/GHSA-c37p-4qqg-3p76/GHSA-c37p-4qqg-3p76.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c37p-4qqg-3p76",
-  "modified": "2026-03-05T21:59:26Z",
+  "modified": "2026-03-06T01:03:39Z",
   "published": "2026-02-18T00:54:48Z",
   "aliases": [
     "CVE-2026-29606"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-c37p-4qqg-3p76"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29606"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/commit/ff11d8793b90c52f8d84dae3fbb99307da51b5c9"
@@ -51,6 +59,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulncheck.com/advisories/openclaw-webhook-signature-verification-bypass-via-ngrok-loopback-compatibility"
     }
   ],
   "database_specific": {
@@ -60,6 +72,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-02-18T00:54:48Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-03-05T22:16:23Z"
   }
 }

advisories/github-reviewed/2026/02/GHSA-jqpq-mgvm-f9r6/GHSA-jqpq-mgvm-f9r6.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jqpq-mgvm-f9r6",
-  "modified": "2026-03-05T22:00:12Z",
+  "modified": "2026-03-06T01:04:18Z",
   "published": "2026-02-18T00:55:50Z",
   "aliases": [
     "CVE-2026-29610"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-jqpq-mgvm-f9r6"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29610"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/commit/013e8f6b3be3333a229a066eef26a45fec47ffcc"
@@ -51,6 +59,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulncheck.com/advisories/openclaw-command-hijacking-via-unsafe-path-handling"
     }
   ],
   "database_specific": {
@@ -62,6 +74,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-02-18T00:55:50Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-03-05T22:16:24Z"
   }
 }

advisories/github-reviewed/2026/02/GHSA-mj5r-hh7j-4gxf/GHSA-mj5r-hh7j-4gxf.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mj5r-hh7j-4gxf",
-  "modified": "2026-03-05T21:54:21Z",
+  "modified": "2026-03-06T01:03:30Z",
   "published": "2026-02-18T00:54:32Z",
   "aliases": [
     "CVE-2026-28480"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -59,6 +63,10 @@
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-mj5r-hh7j-4gxf"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28480"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/commit/9e147f00b48e63e7be6964e0e2a97f2980854128"
@@ -74,6 +82,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.14"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulncheck.com/advisories/openclaw-identity-spoofing-via-mutable-username-in-telegram-allowlist-authorization"
     }
   ],
   "database_specific": {
@@ -84,6 +96,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-02-18T00:54:32Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-03-05T22:16:22Z"
   }
 }

advisories/github-reviewed/2026/02/GHSA-mqpw-46fh-299h/GHSA-mqpw-46fh-299h.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mqpw-46fh-299h",
-  "modified": "2026-03-05T21:51:41Z",
+  "modified": "2026-03-06T01:02:19Z",
   "published": "2026-02-17T21:39:11Z",
   "aliases": [
     "CVE-2026-28473"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -40,9 +44,21 @@
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-mqpw-46fh-299h"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28473"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openclaw/openclaw/commit/efe2a464afcff55bb5a95b959e6bd9ec0fef086e"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/openclaw/openclaw"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-approve-chat-command"
     }
   ],
   "database_specific": {
@@ -53,6 +69,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-02-17T21:39:11Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-03-05T22:16:21Z"
   }
 }

advisories/github-reviewed/2026/02/GHSA-mr32-vwc2-5j6h/GHSA-mr32-vwc2-5j6h.json

@@ -1,14 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mr32-vwc2-5j6h",
-  "modified": "2026-03-05T21:47:06Z",
+  "modified": "2026-03-06T01:02:27Z",
   "published": "2026-02-17T16:45:47Z",
   "aliases": [
     "CVE-2026-28458"
   ],
   "summary": "OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access",
   "details": "### Summary\nIn affected versions, the Browser Relay `/cdp` WebSocket endpoint did not require an authentication token. As a result, a website running in the browser could potentially connect to the local relay (via loopback WebSocket) and use CDP to access cookies from other open tabs and run JavaScript in the context of other tabs.\n\n### Affected Packages / Versions\n- npm: `openclaw` `>= 2026.1.20, < 2026.2.1`\n- npm: `moltbot` `<= 0.1.0`\n\n### Details\nThe Chrome extension Browser Relay service exposes a local WebSocket endpoint at `ws://127.0.0.1:18792/cdp` (default port) for forwarding Chrome DevTools Protocol (CDP) messages.\n\nIn affected versions, the `/cdp` upgrade path verified the TCP peer was loopback but did not require a shared secret and did not block browser-initiated cross-origin requests.\n\n### Impact\n- Potential disclosure of sensitive information (for example, session cookies from other open tabs)\n- Potential JavaScript execution in the context of other open tabs\n\nUsers must have the Browser Relay extension installed and active, and must visit an untrusted site.\n\n### Fix\n`openclaw` now requires a per-instance shared secret header for Browser Relay access:\n- HTTP header: `x-openclaw-relay-token`\n\nIt also rejects `/cdp` WebSocket upgrades when the Origin header is present but is not `chrome-extension://...`, and refuses `/cdp` connections unless the extension is connected.\n\n### Fix Commit(s)\n- `a1e89afcc19efd641c02b24d66d689f181ae2b5c`\n\n### Releases\n- `openclaw@2026.2.1` includes the fix.\n- Latest published `openclaw` at time of writing: `2026.2.13`.\n\n### Mitigation\n- Update to `openclaw@>= 2026.2.1`.\n- If you cannot update immediately, disable the Browser Relay extension / relay server and avoid visiting untrusted sites.\n\nThanks @johnatzeropath, @LeftenantZero, and @yueyueL for reporting.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
@@ -59,6 +63,10 @@
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-mr32-vwc2-5j6h"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28458"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/commit/a1e89afcc19efd641c02b24d66d689f181ae2b5c"
@@ -70,6 +78,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vulncheck.com/advisories/openclaw-missing-authentication-in-browser-relay-cdp-websocket-endpoint"
     }
   ],
   "database_specific": {
@@ -79,6 +91,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-02-17T16:45:47Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-03-05T22:16:18Z"
   }
 }