openclaw vulnerabilities (npm)
593 vulnerabilities.
-
openclawnpm OpenClaw < 2026.6.6 Policy Bypass via CDP Discovery 6.3 Medium -
openclawnpm OpenClaw < 2026.6.5 Authorization Header Forwarding via SSE 6.0 Medium -
openclawnpm OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing 7.6 High -
openclawnpm OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH 7.2 High -
openclawnpm OpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control Variables 7.6 High -
openclawnpm OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy 6.0 Medium -
openclawnpm OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening 2.3 Low -
openclawnpm OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS 5.3 Medium -
openclawnpm OpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles 2.3 Low -
openclawnpm OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency 6.0 Medium -
openclawnpm OpenClaw < 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment Variable 7.0 High -
openclawnpm OpenClaw < 2026.5.3 - Mutable Display Name Binding in Zalo allowFrom Policy 8.6 High -
openclawnpm OpenClaw 2026.4.23 < 2026.4.24 - Insecure File Permissions in Config Recovery via OpenClaw.json 5.7 Medium -
openclawnpm OpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks 7.6 High -
openclawnpm OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands 6.0 Medium -
openclawnpm OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS 7.6 High -
openclawnpm OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairing 2.3 Low -
openclawnpm OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass 6.3 Medium -
openclawnpm OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command 6.8 Medium -
openclawnpm OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom 8.6 High -
openclawnpm OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers 2.3 Low -
openclawnpm OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope 5.3 Medium -
openclawnpm OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpath 7.0 High -
openclawnpm OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping 2.3 Low -
openclawnpm OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search 6.0 Medium -
openclawnpm OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session 8.7 High -
openclawnpm OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable 7.0 High -
openclawnpm OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML 2.1 Low -
openclawnpm OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects 6.0 Medium -
openclawnpm OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation 6.0 Medium -
openclawnpm OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection 6.0 Medium -
openclawnpm OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers 6.3 Medium -
openclawnpm OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases 8.7 High -
openclawnpm OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings 2.3 Low -
openclawnpm OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands 8.2 High -
openclawnpm QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command 7.4 High -
openclawnpm OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration 7.4 High -
openclawnpm OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist 7.6 High -
openclawnpm OpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload 6.0 Medium -
openclawnpm OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display 8.5 High -
openclawnpm OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement 7.7 High -
openclawnpm OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding 6.0 Medium -
openclawnpm OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn 2.3 Low -
openclawnpm OpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope 7.1 High -
openclawnpm Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay 6.0 Medium -
openclawnpm OpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom 8.6 High -
openclawnpm OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket 8.7 High -
openclawnpm OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn 6.9 Medium -
openclawnpm OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override 8.7 High -
openclawnpm OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback 6.9 Medium - Show olderLoading…