Search Vulnerabilities

OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend

OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File

Cortex XDR Agent: Local Administrator can disable the agent on Windows

OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization

Local privilege escalation due to improper handling of environment variables

Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53

Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53

OpenClaw < 2026.2.21 - Environment Variable Injection via Config env.vars

Dell PowerScale OneFS, versions 9

eBay API MCP Server Affected by Environment Variable Injection

Shopire <= 1.0.57 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install

Cursor has a Terminal Tool Allowlist Bypass via Environment Variables

Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

External Control of System or Configuration Setting and Uncontrolled Search Path Element in sfw

Taguette vulnerable to password reset link poisoning

Remote staging in Liferay Portal 7

Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Netavark: podman: netavark may resolve hostnames to unexpected hosts

Wing FTP Server before 7

Growatt Cloud portal External Control of System or Configuration Setting