rootpwn

medium · CVSS v3 5.4 · CVSS v4 5.3 · EPSS 0.00188

CVE-2026-100564

OpenClaw versions prior to 2026.8.1 allow spreadsheet formula injection in attendance CSV exports. The flaw lets attackers craft cells that

Overview

OpenClaw versions prior to 2026.8.1 allow spreadsheet formula injection in attendance CSV exports. The flaw lets attackers craft cells that execute when opened in formula-enabled applications. This can lead to unintended code execution with the user’s permissions.

Description

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications.

Impact

Confidentiality: malicious formulas can exfiltrate data. Integrity: injected formulas may alter or corrupt exported data. Availability: not directly impacted. Defenders: users who export and open CSV files in spreadsheet software.

Remediation

Upgrade OpenClaw to 2026.8.1 or later. If upgrade is not possible, sanitize participant names by escaping or removing leading '=', '+', '-', or '@' characters before export. Configure spreadsheet applications to disable automatic formula evaluation or import CSVs as plain text.

Risk context

The CVE has a medium severity score (5.4) and a very low EPSS of 0.00188, indicating a low likelihood of exploitation but still worth addressing to prevent potential data leakage or execution of malicious code.

Affected products

  • OpenClaw <2026.8.1

Scores

Severity
medium
CVSS v2
6.4
CVSS v3
5.4
CVSS v4
5.3
EPSS
0.00188

formula-injection CSV OpenClaw medium-severity defense sanitization

← All CVEs

Related CVEs

medium

CVE-2026-11871

The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of team members the administrator has not published publicly.

View analysis

medium

CVE-2026-100604

ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerUserId of its original publisher, and transfer and lifecycle authorization checks trust that historical user before requiring current organization privileges. An authenticated user who originally published an organization skill can therefore transfer, delete, or restore that skill — taking control of its trusted name and history — even after their organization privileges have been revoked or downgraded. The issue was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41; the complete historical affected range was not established. It is fixed by PR #3680, included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650, which was deployed to clawhub.ai on 2026-09-11; self-hosted deployments should update to that revision or a later descendant. The npm CLI and OpenClaw runtime are separate products and are not affected.

View analysis

medium

CVE-2026-100503

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilation, causing the decompile helper process to crash and denying service to analysts and automated analysis pipelines.

View analysis

medium

CVE-2026-100505

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in multi-byte lead units to trigger out-of-bounds reads that crash the decompiler or leak adjacent heap memory into decompiled output.

View analysis