openclaw_scanner/research/proposed_changes/add_new_cves_batch3.json at main · MahdiHedhli/openclaw_scanner · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
[
  {
    "id": "CVE-2026-32895",
    "title": "Authorization bypass in system event handlers allows unauthorized Slack events to be enqueued",
    "severity": "MEDIUM",
    "fixed_in": "2026.2.26",
    "surface": [
      "chat_bridge",
      "webhook"
    ],
    "requires_auth": true,
    "affected_ranges": [
      {
        "lt": "2026.2.26"
      }
    ],
    "references": [
      "https://dailycve.com/openclaw-authorization-bypass-cve-2026-32895-medium/",
      "https://cve.threatint.eu/CVE/CVE-2026-32895"
    ]
  },
  {
    "id": "CVE-2026-32896",
    "title": "BlueBubbles plugin webhook authentication bypass via passwordless loopback fallback",
    "severity": "MEDIUM",
    "fixed_in": "2026.2.21",
    "surface": [
      "webhook",
      "chat_bridge"
    ],
    "requires_auth": false,
    "affected_ranges": [
      {
        "lt": "2026.2.21"
      }
    ],
    "references": [
      "https://dailycve.com/openclaw-authentication-bypass-cve-2026-32896-medium/",
      "https://advisories.gitlab.com/pkg/npm/openclaw/GHSA-vh4c-j2xv-9pv9/"
    ]
  },
  {
    "id": "CVE-2026-32898",
    "title": "ACP client auto-approves tool calls based on untrusted toolCall.kind metadata and permissive name heuristics",
    "severity": "MEDIUM",
    "fixed_in": "2026.2.23",
    "surface": [
      "agent_runtime",
      "tooling"
    ],
    "requires_auth": true,
    "affected_ranges": [
      {
        "lt": "2026.2.23"
      }
    ],
    "references": [
      "https://cve.threatint.eu/CVE/CVE-2026-32898",
      "https://vulnerability.circl.lu/vuln/cve-2026-32898"
    ]
  }
]