Known Vulnerabilities for Slack by Openclaw
Listed below are 10 of the newest known vulnerabilities associated with "Slack" by "Openclaw".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100575 json | OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowe... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100531 json | The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a fil... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-90251 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MSFT: validate evt_prefix_len against the res... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-90090 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the ... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-84713 json | A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.notific... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-81099 json | tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServ... | Not Provided | 2026-08-27 | 2026-08-29 |
| CVE-2026-80869 json | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfs_read_inode_... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-75511 json | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs fro... | Not Provided | 2026-09-22 | 2026-09-25 |
| CVE-2026-74242 json | A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universa... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-72217 json | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writ... | Not Provided | 2026-08-15 | 2026-08-17 |