openclaw vulnerabilities (npm)
593 vulnerabilities.
openclawnpmOpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL4.9 MediumopenclawnpmOpenClaw 2026.4.9 < 2026.4.10 - Sender Policy Bypass in Host Media Attachment Reads4.9 MediumopenclawnpmOpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags8.9 HighopenclawnpmOpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Execution8.7 HighopenclawnpmOpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools7.1 HighopenclawnpmOpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing8.7 HighopenclawnpmOpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions4.9 MediumopenclawnpmOpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes7.1 HighopenclawnpmOpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth7.7 HighopenclawnpmOpenClaw < 2026.4.10 - SSRF Policy Bypass in Existing-Session Browser Interaction Routes4.9 MediumopenclawnpmOpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routes4.9 MediumopenclawnpmOpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes6.0 MediumopenclawnpmOpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding9.0 CriticalopenclawnpmOpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup7.7 HighopenclawnpmOpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameter7.1 HighopenclawnpmOpenClaw < 2026.4.14 - Server-Side Request Forgery via Private Network Navigation6.3 MediumopenclawnpmOpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass4.9 MediumopenclawnpmOpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling8.3 HighopenclawnpmOpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File7.0 HighopenclawnpmOpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image4.9 MediumopenclawnpmOpenClaw < 2026.4.12 - Improper Authorization via Empty Approver Lists6.0 MediumopenclawnpmOpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events9.3 CriticalopenclawnpmOpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy8.7 HighopenclawnpmOpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection8.7 HighopenclawnpmOpenClaw 2026.4.5 through 2026.4.9 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpoint7.1 HighopenclawnpmOpenClaw 2026.4.10 < 2026.4.14 - Missing Sender Authorization in Microsoft Teams SSO Invoke Handler6.3 MediumopenclawnpmOpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recovery6.0 MediumopenclawnpmOpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade9.1 CriticalopenclawnpmOpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Path8.2 HighopenclawnpmOpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events9.1 CriticalopenclawnpmOpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes4.9 MediumopenclawnpmOpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliases7.1 HighopenclawnpmOpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches7.6 HighopenclawnpmOpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Route9.2 CriticalopenclawnpmOpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator2.0 LowopenclawnpmOpenClaw assertPublicHostname web-fetch.ts server-side request forgery6.3 MediumopenclawnpmOpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec Environment5.8 MediumopenclawnpmOpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validation5.3 MediumopenclawnpmOpenClaw < 2026.4.8 - Missing Integrity Verification in Package Downloads7.5 HighopenclawnpmOpenClaw Host-Exec Environment Variable Injection5.9 MediumopenclawnpmOpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling4.8 MediumopenclawnpmOpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication6.0 MediumopenclawnpmOpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigation4.8 MediumopenclawnpmOpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write Scope8.7 HighopenclawnpmOpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_image6.0 MediumopenclawnpmOpenClaw < 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch Paths5.1 MediumopenclawnpmOpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token Rotation2.3 LowopenclawnpmOpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication Attempts6.3 MediumopenclawnpmOpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypass7.3 HighopenclawnpmOpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel Writes2.3 Low- Show moreLoading…