This site uses cookies for analytics and advertising. Accept them all, decline them all, or choose which ones you allow. Learn more in our privacy policy.

Home
About
System Admin
Security
Tech
Home Lab
Threats
Weekly Digest
Deals
Advisories
Phishing Updates
Threats
Image Scraper
Contact

Security Advisory – 21 Apr 2026

Security fixes and advisories that landed overnight. One advisory is included in this update. The item below covers an OpenClaw issue that affects startup configuration handling. Updated 21 Apr 2026 00:16 GMT.

Top items

NIST

CVE-2026-41294

OpenClaw before 2026.3.28 loads the current working directory .env file before trusted state-dir configuration. That lets an attacker place a malicious .env file in a repository or workspace and override runtime configuration and security-sensitive environment settings during startup.

  • Published: 21 Apr 2026 00:16 GMT
  • CVEs: CVE-2026-41294
  • Notes: environment variable injection
0
0
0
0
Total
0
Shares
Share 0
Tweet 0
Pin it 0
Share 0
Tags:
Advisories

Related posts

Prometheus | v3.15.1

Prometheus v3 15 1: container images distrust emSign ECC Root CA G3 and Comodo AAA Services root, rebuilt with Go 1 27 3, x net v0 60 0, upgrade to v3 15 1

headscale | v0.29.7

Headscale v0 29 7 security release: upgrade to v0 29 7, update Tailscale to v1 104 4 or newer, disable SSH agent and port forwarding per node until update

ionCube Loader: offline PHP bytecode decryption

ionCube Loader is not magic, just a native PHP extension with a very hard boundary. Once you trace the entrypoint and the key derivation properly, the supposed mystery turns into a pile of exacting...