CWE-807 Reliance on Untrusted Inputs in a Security Decision

DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

KaTeX: Existing prototype pollution can bypass trust restrictions

9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

9Router has an Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header

Traefik entrypoint header-name sanitization bypassed via request trailers

webhookd: Unrestricted HTTP Header to Shell Variable Injection

Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

OpenClaw: Skill Workshop apply flow could override pending approval

Blocky DNSSEC validation bypass and validation-cache scope pollution

Duplicate Advisory: BlueBubbles sender policy could match mutable conversation identifiers

Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation

Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header

SillyTavern has Authentication Bypass via SSO Header Injection

Bandit trusts client-supplied URI scheme on plaintext connections

OpenClaw: diffs viewer misclassifies proxied remote requests as loopback when `allowRemoteViewer` is disabled

OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic

OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing

OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens

Duplicate Advisory: OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens

OpenClaw: Google Chat Authz Bypass via Group Policy Rebinding with Mutable Space displayName

Duplicate Advisory: OpenClaw: Google Chat Authz Bypass via Group Policy Rebinding with Mutable Space displayName

OpenClaw: Synology Chat reply delivery could be rebound through username-based user resolution.

OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting

OpenClaw has a Trusted-proxy Control UI pairing bypass which allows unpaired node sessions

OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions