Skip to content
OpenAdvisories

Weakness (CWE)

CWE-669: Incorrect Resource Transfer Between Spheres

Class Draft

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

Source: MITRE CWE-669

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2026-31431 Exploited Public exploit EPSS 98%

    crypto: algif_aead - Revert to operating out-of-place

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Alpine
    KEV May 1, 2026
  • High 8.8
    CVE-2026-25253 Public exploit EPSS 32%

    OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl

    OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.

    OpenClaw OpenClaw clawdbot npm
  • High 8.5
    CVE-2025-34158 Public exploit

    Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between sphe…

    Plex Media Server