Threats tagged 'ghsa-xm83-jc96-gw22'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-43575OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC Critical9.22026-05-06GCVE DatabaseCVE-2026-43575 OpenClaw versions from 2026.2.21 up to but not including 2026.4.10 have an authentication bypass vulnerability in the sandbox noVNC helper route. This flaw allows attackers to access the noVNC helper route without bridge authentication, exposing interactive browser session credentials and enabling unauthorized access to the session. Report on CVE-2026-43575 Vulnerability CWE-862 #ghsa-xm83-jc96-gw22	GCVE Database	2026-05-06

Page 1 of 1