CVE WATCH / VULNERABILITY DETAIL
CVE-2026-100563
MEDIUMCVSS 5.4NVD feed
Published 26 September 2026 · tracked since 26 September 2026
Description
OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label o
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-126184 HIGH 8.2
- CVE-2026-126183 HIGH 8.7
- CVE-2026-126181 HIGH 8
- CVE-2026-126180 HIGH 8.4
- CVE-2026-126177 HIGH 8.1
- CVE-2026-126176 HIGH 8.1
- CVE-2026-126175 HIGH 8.8
- CVE-2026-126170 CRITICAL 9.8
- CVE-2026-126165 HIGH 7.5
- CVE-2026-126164 CRITICAL 9.4