openclaw vulnerabilities (npm)
593 vulnerabilities.
openclawnpmOpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers5.8 MediumopenclawnpmOpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter5.9 MediumopenclawnpmOpenClaw < 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC Observer8.5 HighopenclawnpmOpenClaw < 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group Allowlist7.1 HighopenclawnpmOpenClaw < 2026.2.24 - Approval Gating Bypass via Dispatch-Wrapper Depth-Cap Mismatch in system.run6.0 MediumopenclawnpmOpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization6.9 MediumopenclawnpmOpenClaw < 2026.2.21 - Arbitrary File Read via grep -e Flag Policy Bypass6.0 MediumopenclawnpmOpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access CheckNo scoreopenclawnpmOpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs8.9 HighopenclawnpmOpenClaw < 2026.2.22 - Allowlist Bypass via sort Configuration in safeBins7.1 HighopenclawnpmOpenClaw < 2026.2.26- Authentication Bypass via Encoded Dot-Segment Traversal in /api/channels8.3 HighopenclawnpmOpenClaw < 2026.2.21 - Authentication Bypass in HTTP Gateway Routes via Tokenless Tailscale Auth8.2 HighopenclawnpmOpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File Naming8.8 HighopenclawnpmOpenClaw < 2026.2.23 - HTML Injection via Unvalidated Image MIME Type in Data-URL Interpolation2.4 LowopenclawnpmOpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandbox7.1 HighopenclawnpmOpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flag4.8 MediumopenclawnpmOpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling2.3 LowopenclawnpmOpenClaw 2.0.0-beta3 < 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversal8.3 HighopenclawnpmOpenClaw < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool Execution5.8 MediumopenclawnpmOpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection7.1 HighopenclawnpmOpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -S7.1 HighopenclawnpmOpenClaw < 2026.2.22 - Path Traversal via Basename-Only Allowlist Matching on macOS7.3 HighopenclawnpmOpenClaw < 2026.2.22 - Remote Code Execution via SHELLOPTS/PS4 Environment Injection in system.run7.5 HighopenclawnpmOpenClaw < 2026.2.26 - Node Reconnect Metadata Spoofing via Unsigned Platform Fields8.6 HighopenclawnpmOpenClaw Client PKCE Verifier Information Disclosure Vulnerability5.3 MediumopenclawnpmOpenClaw has hook auth rate limiter bypass via IPv4-mapped IPv6 client key variants6.9 MediumopenclawnpmOpenClaw < 2026.2.22 - Symlink Traversal in Avatar Handling6.8 MediumopenclawnpmOpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter9.3 CriticalopenclawnpmOpenClaw < 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory Rebind6.9 MediumopenclawnpmOpenClaw < 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message Actions7.1 HighopenclawnpmOpenClaw < 2026.2.25 - Approval Identity Mismatch in system.run Command Execution5.7 MediumopenclawnpmOpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval8.8 HighopenclawnpmOpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass9.4 CriticalopenclawnpmOpenClaw 2026.1.16-2 < 2026.2.14 - Path Traversal (Zip Slip) in Archive Extraction via Installation Commands6.8 MediumopenclawnpmOpenClaw < 2026.2.14 - Path Traversal in Sandbox Skill Mirroring via Name Parameter5.6 MediumopenclawnpmOpenClaw < 2026.2.12 - Timing Attack in Hooks Token Authentication8.2 HighopenclawnpmOpenClaw < 2026.2.13 - Timing Attack via Hook Token Comparison6.3 MediumopenclawnpmOpenClaw < 2026.2.14 - Zip Slip Path Traversal in TAR Archive Extraction8.3 HighopenclawnpmOpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods8.7 HighopenclawnpmOpenClaw < 2026.2.26 - Approval Context-Binding Weakness in system.run via host=node2.0 LowopenclawnpmOpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream8.7 HighopenclawnpmOpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass8.7 HighopenclawnpmOpenClaw Canvas Path Traversal Information Disclosure Vulnerability6.5 MediumopenclawnpmOpenClaw < 2026.2.23 - Exec Approval Bypass via Unrecognized Multiplexer Shell Wrappers7.1 HighopenclawnpmOpenClaw: Node exec approvals could be replayed across nodes6.9 MediumopenclawnpmOpenClaw < 2026.2.22 - Authorization Bypass via allow-always Wrapper Persistence7.1 HighopenclawnpmOpenClaw < 2026.2.22 - Arbitrary File Read via Symlink Following in Static File Handler4.8 MediumopenclawnpmOpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling5.9 MediumopenclawnpmOpenClaw < 2026.2.19 - ReDoS and Regex Injection via Unescaped Feishu Mention Metadata6.9 MediumopenclawnpmOpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell Chains5.6 Medium- Show moreLoading…