openclaw vulnerabilities (npm)
593 vulnerabilities.
openclawnpmOpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution7.1 HighopenclawnpmOpenClaw < 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP Dispatch7.1 HighopenclawnpmOpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy Authentication7.7 HighopenclawnpmOpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch8.7 HighopenclawnpmOpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSON6.9 MediumopenclawnpmOpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations4.3 MediumopenclawnpmOpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass7.1 HighopenclawnpmOpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy5.8 MediumopenclawnpmOpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass7.7 HighopenclawnpmOpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding6.3 MediumopenclawnpmOpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy2.0 LowopenclawnpmOpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization6.9 MediumopenclawnpmOpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints2.3 LowopenclawnpmOpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing8.7 HighopenclawnpmOpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting6.0 MediumopenclawnpmOpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download6.0 MediumopenclawnpmOpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal7.6 HighopenclawnpmOpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root8.5 HighopenclawnpmOpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation5.1 MediumopenclawnpmOpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload7.2 HighopenclawnpmOpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download4.8 MediumopenclawnpmOpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox Backends2.0 LowopenclawnpmOpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History5.3 MediumopenclawnpmOpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency6.9 MediumopenclawnpmOpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation2.3 LowopenclawnpmOpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override8.5 HighopenclawnpmOpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted Messages2.3 LowopenclawnpmOpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation9.0 CriticalopenclawnpmOpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypass2.3 LowopenclawnpmOpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass7.1 HighopenclawnpmOpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling5.8 MediumopenclawnpmOpenClaw < 2026.3.31 - Callback Origin Mutation in Plivo Voice-call Replay6.3 MediumopenclawnpmOpenClaw < 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth Routes8.8 HighopenclawnpmOpenClaw - Shell-Bleed Protection Preflight Validation Bypass5.3 MediumopenclawnpmOpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File8.5 HighopenclawnpmOpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables7.0 HighopenclawnpmOpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset Command8.4 HighopenclawnpmOpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrapper7.0 HighopenclawnpmOpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization8.5 HighopenclawnpmOpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges5.1 MediumopenclawnpmOpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions5.3 MediumopenclawnpmOpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard7.1 HighopenclawnpmOpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter5.3 MediumopenclawnpmOpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist5.8 MediumopenclawnpmOpenClaw < 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypass7.1 HighopenclawnpmOpenClaw < 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket Upgrades8.7 HighopenclawnpmOpenClaw 2026.2.6 < 2026.3.28 - Arbitrary File Read via Feishu upload_image Parameter6.0 MediumopenclawnpmOpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands8.7 HighopenclawnpmOpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding7.4 HighopenclawnpmOpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V38.2 High- Show moreLoading…