CVE-2026-10281

npm/@enderfga/claw-orchestrator CVE-2026-10281: high 7.3

Claw Orchestrator is missing authentication for the component API Endpoint

Action: Upgrade @enderfga/claw-orchestrator to 3.5.6 or later.

npm i @enderfga/claw-orchestrator@3.5.6

Affected

Fixed versions

Sources

• osv: GHSA-q6qc-xp4q-rjq5
• https://nvd.nist.gov/vuln/detail/CVE-2026-10281
• https://github.com/Enderfga/claw-orchestrator/issues/61
• https://github.com/Enderfga/claw-orchestrator/commit/d0b02a800aa0689d9428cc4cc170e0b6589fb2c3
• https://github.com/Enderfga/claw-orchestrator
• https://github.com/Enderfga/claw-orchestrator/releases/tag/v3.5.6
• https://vuldb.com/cve/CVE-2026-10281
• https://vuldb.com/submit/825429
• https://vuldb.com/vuln/367574
• https://vuldb.com/vuln/367574/cti

CVE-2026-10281 · published 2026-06-01T21:30:42Z · modified 2026-07-09T13:56:44.615882Z · JSON