Known Vulnerabilities for Workspaces by @turbo
Listed below are 10 of the newest known vulnerabilities associated with "Workspaces" by "@turbo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44114 json | OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv f... | Not Provided | 2026-05-06 | 2026-05-07 |
| CVE-2026-42463 json | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-W... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-41649 json | Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0... | Not Provided | 2026-04-28 | 2026-04-29 |
| CVE-2026-41336 json | OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabli... | Not Provided | 2026-04-23 | 2026-04-24 |
| CVE-2026-41277 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vu... | Not Provided | 2026-04-23 | 2026-04-25 |
| CVE-2026-39425 json | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vul... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2026-39355 json | Genealogy is a family tree PHP application. Prior to 5.9.1, a critical broken access control vulnerability in the genealogy a... | Not Provided | 2026-04-07 | 2026-04-08 |
| CVE-2026-35668 json | OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read ar... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-27769 json | Mattermost versions 10.11.x <= 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspac... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-26964 json | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.634.6 ... | Not Provided | 2026-02-20 | 2026-02-20 |