Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

Scheduled Pinned Locked Moved Uncategorized
23 Posts 16 Posters 2 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • cwebber@social.coopC cwebber@social.coop

    OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

    That's... wow. New high score!

    shansterable@ohai.socialS This user is from outside of this forum
    shansterable@ohai.socialS This user is from outside of this forum
    shansterable@ohai.social
    wrote last edited by
    #10

    @cwebber
    CVE = Common Vulnerabilities and Exposures, in case that helps anyone else besides me

    I try to do for initialisms and acronyms what alt text does for images.

    Wikipedia: "The Common Vulnerabilities and Exposures (CVE) system, originally Common Vulnerability Enumeration, provides a reference method for publicly known information-security vulnerabilities and exposures."

    thanatoidjones@mastodon.socialT 1 Reply Last reply
    0
    • vv@solarpunk.moeV vv@solarpunk.moe

      @cwebber the more CVEs a project has, the more Web Scale it is

      phl@mastodon.socialP This user is from outside of this forum
      phl@mastodon.socialP This user is from outside of this forum
      phl@mastodon.social
      wrote last edited by
      #11

      @vv @cwebber https://tenor.com/h1iAp0cylbl.gif

      vv@solarpunk.moeV 1 Reply Last reply
      0
      • shansterable@ohai.socialS shansterable@ohai.social

        @cwebber
        CVE = Common Vulnerabilities and Exposures, in case that helps anyone else besides me

        I try to do for initialisms and acronyms what alt text does for images.

        Wikipedia: "The Common Vulnerabilities and Exposures (CVE) system, originally Common Vulnerability Enumeration, provides a reference method for publicly known information-security vulnerabilities and exposures."

        thanatoidjones@mastodon.socialT This user is from outside of this forum
        thanatoidjones@mastodon.socialT This user is from outside of this forum
        thanatoidjones@mastodon.social
        wrote last edited by
        #12

        @shansterable @cwebber Thank you!

        1 Reply Last reply
        0
        • vv@solarpunk.moeV vv@solarpunk.moe

          @cwebber the more CVEs a project has, the more Web Scale it is

          darkling@mstdn.socialD This user is from outside of this forum
          darkling@mstdn.socialD This user is from outside of this forum
          darkling@mstdn.social
          wrote last edited by
          #13

          @vv @cwebber I thought webscale was the unsightly crusty build-up on the inside of the intertubes.

          1 Reply Last reply
          0
          • cwebber@social.coopC cwebber@social.coop

            OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

            That's... wow. New high score!

            disorderlyf@todon.euD This user is from outside of this forum
            disorderlyf@todon.euD This user is from outside of this forum
            disorderlyf@todon.eu
            wrote last edited by
            #14

            @cwebber

            Link Preview Image
            1 Reply Last reply
            0
            • phl@mastodon.socialP phl@mastodon.social

              @vv @cwebber https://tenor.com/h1iAp0cylbl.gif

              vv@solarpunk.moeV This user is from outside of this forum
              vv@solarpunk.moeV This user is from outside of this forum
              vv@solarpunk.moe
              wrote last edited by
              #15

              @phl @cwebber yep, this is what i was thinking of, haha

              phl@mastodon.socialP 1 Reply Last reply
              0
              • cwebber@social.coopC cwebber@social.coop

                OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

                That's... wow. New high score!

                turre@mementomori.socialT This user is from outside of this forum
                turre@mementomori.socialT This user is from outside of this forum
                turre@mementomori.social
                wrote last edited by
                #16

                @cwebber CVE as a service

                1 Reply Last reply
                0
                • vv@solarpunk.moeV vv@solarpunk.moe

                  @phl @cwebber yep, this is what i was thinking of, haha

                  phl@mastodon.socialP This user is from outside of this forum
                  phl@mastodon.socialP This user is from outside of this forum
                  phl@mastodon.social
                  wrote last edited by
                  #17

                  @vv @cwebber It lives rent free in our heads all these years later 😄

                  vv@solarpunk.moeV 1 Reply Last reply
                  0
                  • cwebber@social.coopC cwebber@social.coop

                    OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

                    That's... wow. New high score!

                    ckure@infosec.exchangeC This user is from outside of this forum
                    ckure@infosec.exchangeC This user is from outside of this forum
                    ckure@infosec.exchange
                    wrote last edited by
                    #18

                    @cwebber Everybody: AI can’t find CVEs
                    OpenClaw: Bet

                    1 Reply Last reply
                    0
                    • phl@mastodon.socialP phl@mastodon.social

                      @vv @cwebber It lives rent free in our heads all these years later 😄

                      vv@solarpunk.moeV This user is from outside of this forum
                      vv@solarpunk.moeV This user is from outside of this forum
                      vv@solarpunk.moe
                      wrote last edited by
                      #19

                      @phl @cwebber i can't bring myself to watch it because the voice is so annoying

                      1 Reply Last reply
                      0
                      • cwebber@social.coopC cwebber@social.coop

                        OpenClaw also got a terrifying privilege escalation vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-33579

                        Meanwhile the OpenClaw founder is claiming shush, it's no big deal, probably most of these aren't really exploitable! (There's good business interest reasons to argue that, since OpenClaw's founders got acquired by OpenAI) https://news.ycombinator.com/item?id=47629849

                        Okay. I know I have more than a few security researchers following me. There's a public list of literally hundreds of thousands of publicly accessible OpenClaw instances right here: https://openclaw.allegro.earth/

                        Anyone try taking a sampling of them and testing how vulnerable against recent escalation CVEs they are? Could be a rather juicy writeup!

                        lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                        lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                        lunathemoongirl@cailincat.cloud
                        wrote last edited by
                        #20

                        @cwebber I mean you could make an argument that the CVE s dont matter given the target audience of openclaw

                        cwebber@social.coopC 1 Reply Last reply
                        0
                        • lunathemoongirl@cailincat.cloudL lunathemoongirl@cailincat.cloud

                          @cwebber I mean you could make an argument that the CVE s dont matter given the target audience of openclaw

                          cwebber@social.coopC This user is from outside of this forum
                          cwebber@social.coopC This user is from outside of this forum
                          cwebber@social.coop
                          wrote last edited by
                          #21

                          @lunathemoongirl Indeed, OpenClaw is a CVE

                          lunathemoongirl@cailincat.cloudL 1 Reply Last reply
                          0
                          • cwebber@social.coopC cwebber@social.coop

                            @lunathemoongirl Indeed, OpenClaw is a CVE

                            lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                            lunathemoongirl@cailincat.cloudL This user is from outside of this forum
                            lunathemoongirl@cailincat.cloud
                            wrote last edited by
                            #22

                            @cwebber why bother exploiting the program when i can ask the Aiagent to please hand over all the keys and password

                            1 Reply Last reply
                            0
                            • cwebber@social.coopC cwebber@social.coop

                              OpenClaw also got a terrifying privilege escalation vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-33579

                              Meanwhile the OpenClaw founder is claiming shush, it's no big deal, probably most of these aren't really exploitable! (There's good business interest reasons to argue that, since OpenClaw's founders got acquired by OpenAI) https://news.ycombinator.com/item?id=47629849

                              Okay. I know I have more than a few security researchers following me. There's a public list of literally hundreds of thousands of publicly accessible OpenClaw instances right here: https://openclaw.allegro.earth/

                              Anyone try taking a sampling of them and testing how vulnerable against recent escalation CVEs they are? Could be a rather juicy writeup!

                              solonovamax@tech.lgbtS This user is from outside of this forum
                              solonovamax@tech.lgbtS This user is from outside of this forum
                              solonovamax@tech.lgbt
                              wrote last edited by
                              #23

                              @cwebber I doubt they update frequently, so you can even try some quite old CVEs against them!

                              1 Reply Last reply
                              0
                              • R relay@relay.infosec.exchange shared this topic
                              Reply
                              • Reply as topic
                              Log in to reply
                              • Oldest to Newest
                              • Newest to Oldest
                              • Most Votes


                              • Login

                              • Login or register to search.
                              • First post
                                Last post
                              0
                              • Categories
                              • Recent
                              • Tags
                              • Popular
                              • World
                              • Users
                              • Groups