Issues · mf-yang/openclaw-cn · GitHub

Labels Milestones

[Security] Non-owner embedded agent runs expose owner-only `gateway` and `cron` tools

#571

· YLChen-007 opened

on Jun 21, 2026

[Security] Owner-only `gateway` tool exposed to non-owner command-authorized senders in `openclaw-cn`

#570

· YLChen-007 opened

on Jun 21, 2026

[Security] Authenticated `/act` evaluation bypasses the browser private-network navigation guard

#569

· YLChen-007 opened

on Jun 21, 2026

[Security] Authenticated `system.run` allowlist bypass via nested `/usr/bin/env` wrappers in `openclaw-cn`

#568

· YLChen-007 opened

on Jun 20, 2026

[Security] Feishu outbound media fetch allows SSRF to loopback and internal hosts

#567

· YLChen-007 opened

on Jun 20, 2026

[Security] Browser control `/act` evaluate path bypasses configured SSRF navigation policy for existing tabs

#565

· YLChen-007 opened

on Jun 18, 2026

[Security] Workspace-only `apply_patch` can write outside the workspace through a dangling symlink leaf

#566

· YLChen-007 opened

on Jun 18, 2026

[Security] Elevated `allowFrom` sender-scope bypass via recipient and mutable sender metadata in `openclaw-cn`

#564

· YLChen-007 opened

on Jun 18, 2026

[Security] OpenClaw exec `allow-always` approval can be reused across different `busybox sh -c` payloads

#563

· YLChen-007 opened

on Jun 18, 2026

[Security] Browser interaction-driven navigation bypasses `browser.ssrfPolicy` and reaches loopback/private targets

#562

· YLChen-007 opened

on Jun 14, 2026

[Security] Authenticated browser control API allows `file://` local file disclosure via unsupported scheme bypass

#561

· YLChen-007 opened

on Jun 14, 2026

Bug: Auto-compaction notification causes infinite loop in channel sessions

#560

· dy2651 opened

on Jun 2, 2026