Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-100566openclaw line · Incorrect Authorization Medium6.9EPSS 0.2%2026-09-26CVE Database V5CVE-2026-100566 OpenClaw LINE versions before 2026.8.1 have an access control vulnerability where group allowlist mode incorrectly inherits direct message (DM) allowFrom values if groupAllowFrom is not explicitly set. This allows attackers who are members of a group to bypass intended group allowlist restrictions and trigger the agent when DM access is broader than group access. EPSS 0.2%Vulnerability openclaw #ghsa-26gh-65q7-rfpf	CVE Database V5	2026-09-26
High	8.2	EPSS 0.5%	CVE-2023-45559 · n/a High8.2EPSS 0.5%2024-01-03CVE Database V5 An issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. EPSS 0.5%Vulnerability	CVE Database V5	2024-01-03

Page 1 of 1