Skip to content
OpenAdvisories

Vendor

unitedbyai

2 known vulnerabilities.

Products

droidclaw 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2026-17531

    unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization

    A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the component Unsigned Scheduled Callback. This manipulation causes authorization bypass. Remote…

    unitedbyai droidclaw