Skip to content
OpenAdvisories

Product · Nexting

pinclaw

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-108757

    Nexting pinclaw through 0.3.0 Missing Authentication via POST /pinclaw/send

    Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken check on POST /pinclaw/send. Unauthenticated attackers reaching port 18790, which binds all interfaces by…

    Nexting pinclaw