openclaw vulnerabilities (npm)
593 vulnerabilities.
openclawnpmOpenClaw < 2026.3.22 - Policy Bypass via Unvalidated Queued Node Actions2.3 LowopenclawnpmOpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization7.7 HighopenclawnpmOpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UI8.7 HighopenclawnpmOpenClaw < 2026.3.22 - Unauthenticated Resource Exhaustion via Voice Call Webhook6.9 MediumopenclawnpmOpenClaw < 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discovery5.1 MediumopenclawnpmOpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responses6.9 MediumopenclawnpmOpenClaw < 2026.3.22 - Arbitrary Code Execution via Unvalidated WebView JavascriptInterface8.6 HighopenclawnpmOpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper7.7 HighopenclawnpmOpenClaw < 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handling6.9 MediumopenclawnpmOpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat6.0 MediumopenclawnpmOpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders6.9 MediumopenclawnpmOpenClaw - Approval Bypass via Environment Variable Normalization6.9 MediumopenclawnpmOpenClaw < 2026.3.23 - Insufficient Access Control in Gateway Agent Session Reset7.2 HighopenclawnpmOpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway5.1 MediumopenclawnpmOpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verification8.3 HighopenclawnpmOpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read8.7 HighopenclawnpmOpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files6.8 MediumopenclawnpmOpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP9.2 CriticalopenclawnpmOpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request8.7 HighopenclawnpmOpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device Pairing9.3 CriticalopenclawnpmOpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logs8.7 HighopenclawnpmOpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation6.9 MediumopenclawnpmOpenClaw < 2026.3.12 - Forged Event Injection via Feishu Webhook Verification Token8.8 HighopenclawnpmOpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters8.7 HighopenclawnpmOpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections9.4 CriticalopenclawnpmOpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool9.2 CriticalopenclawnpmOpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins8.6 HighopenclawnpmOpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints8.7 HighopenclawnpmOpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalization8.8 HighopenclawnpmOpenClaw < 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in Feishu6.9 MediumopenclawnpmOpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request7.1 HighopenclawnpmOpenClaw < 2026.3.12 - Long-lived Credential Exposure in Pairing Setup Codes8.6 HighopenclawnpmOpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist6.9 MediumopenclawnpmOpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist Enforcement5.3 MediumopenclawnpmOpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs2.0 LowopenclawnpmOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation5.8 MediumopenclawnpmOpenClaw < 2026.3.11 - Unauthorized Session Reset via agent Slash Commands6.9 MediumopenclawnpmOpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners9.4 CriticalopenclawnpmOpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands7.1 HighopenclawnpmOpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands7.3 HighopenclawnpmOpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval7.0 HighopenclawnpmOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface9.3 CriticalopenclawnpmOpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate9.4 CriticalopenclawnpmOpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes9.2 CriticalopenclawnpmOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Path5.8 MediumopenclawnpmOpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode8.1 HighopenclawnpmOpenClaw < 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels Gateway6.3 MediumopenclawnpmOpenClaw < 2026.2.26 - Sender Authorization Bypass in Slack System Event Handlers5.3 MediumopenclawnpmOpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary7.0 HighopenclawnpmOpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink7.2 High- Show moreLoading…