{"id":"EUVD-2026-33334","enisaUuid":"7b9e5128-b39c-3e80-b0bc-859c94570ca0","description":"OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers can route admin commands from unauthorized senders or contexts to execute restricted behavior that policy should have blocked.","datePublished":"May 29, 2026, 3:09:56 PM","dateUpdated":"Sep 24, 2026, 2:17:29 PM","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-w4v6-g3wm-w36c\nhttps://www.vulncheck.com/advisories/openclaw-policy-bypass-in-qqbot-admin-commands-via-dm-only-and-allowfrom-checks\n","aliases":"CVE-2026-34507\nGHSA-vhpw-p338-rhp9\n","assigner":"VulnCheck","epss":0.15,"enisaIdProduct":[{"id":"38a97eb3-06cb-3759-b7d2-6a5f6e731e17","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.4.29"}],"enisaIdVendor":[{"id":"509cc28b-eb84-3866-8641-8a70d52888d1","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"a822d7e3-3d3f-3598-91f9-30ef19a5b213","vulnerability":{"id":"GHSA-vhpw-p338-rhp9","description":"OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers can route admin commands from unauthorized senders or contexts to execute restricted behavior that policy should have blocked.","datePublished":"May 29, 2026, 6:31:33 PM","dateUpdated":"May 29, 2026, 6:31:33 PM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-w4v6-g3wm-w36c\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34507\nhttps://www.vulncheck.com/advisories/openclaw-policy-bypass-in-qqbot-admin-commands-via-dm-only-and-allowfrom-checks\n","enisa_id":"EUVD-2026-33334\n","aliases":"CVE-2026-34507\nGHSA-vhpw-p338-rhp9\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:58:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"bd9c7207-5101-36ee-b337-b79b36260a9d","vulnerability":{"id":"CVE-2026-34507","description":"OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks. Attackers can route admin commands from unauthorized senders or contexts to execute restricted behavior that policy should have blocked.","datePublished":"May 29, 2026, 3:09:56 PM","dateUpdated":"Sep 24, 2026, 2:17:29 PM","status":"PUBLISHED","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-w4v6-g3wm-w36c\nhttps://www.vulncheck.com/advisories/openclaw-policy-bypass-in-qqbot-admin-commands-via-dm-only-and-allowfrom-checks\n","enisa_id":"EUVD-2026-33334\n","assigner":"VulnCheck","epss":0.15,"dataProcessed":"Nov 9, 2026, 7:18:22 AM","vulnerabilityProduct":[{"id":"564c2d78-3cff-307a-9235-6bd708af8a92","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.4.29"}],"vulnerabilityVendor":[{"id":"b868034a-d406-327e-9e7d-a1c5c6822097","vendor":{"name":"OpenClaw"}}]}}],"enisaIdAdvisory":[{"id":"be699ea4-0b62-3128-ba2e-8c2b849a6070","advisory":{"id":"WID-SEC-W-2026-1738","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsmechanismen zu umgehen, erhöhte Berechtigungen zu erlangen, Informationen offenzulegen, Konfigurationen zu manipulieren, beliebige Befehle oder Code auszuführen sowie interne Systeme über SSRF anzugreifen.","datePublished":"May 28, 2026, 10:00:00 PM","dateUpdated":"May 31, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1738.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-1738\n","aliases":"CVE-2026-32906\nCVE-2026-34507\nCVE-2026-35630\nCVE-2026-35673\nCVE-2026-35674\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"445b3783-839b-3dbc-b20a-1cddd78c32e1","product":{"name":"Open Source OpenClaw","vendor":{"name":"open source"}}}]}}]}