Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.2.23 - ACP Permission Auto-Approval Bypass via Untrusted Tool MetadataCVE-2026-32898Fix available5.3 Medium
- openclawOpenClaw Skill Env applySkillConfigenvOverrides code injectionCVE-2026-4039Fix available5.3 Medium
- openclawOpenClaw 2026.2.22-2 < 2026.2.23 - Allowlist Bypass via sort Long-Option Abbreviation in tools.exec.safeBinsCVE-2026-32059Fix available8.7 High
- openclawOpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist modeCVE-2026-28363Public exploitFix available9.9 Critical
- openclawOpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputsCVE-2026-27576Fix available4.8 Medium
- openclawOpenClaw hardened cron webhook delivery against SSRFCVE-2026-27488Fix available6.9 Medium
- openclawOpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injectionCVE-2026-27485Fix available4.6 Medium
- openclawOpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flowsCVE-2026-27484Fix available2.3 Low
- openclawOpenClaw File Existence tools.exec.safeBins information exposureCVE-2026-4040Public exploitFix available4.8 Medium
- openclawOpenClaw < 2026.2.19 - safeBins stdin-only bypass via sort output and recursive grep flagsCVE-2026-31996Fix available2.0 Low
- openclawOpenClaw < 2026.2.14 - Path Traversal in apply_patch via Crafted PathsCVE-2026-32060Fix available8.7 High
- openclawOpenClaw < 2026.2.15 - Cache Poisoning via Deprecated SHA-1 Hash in Sandbox ConfigurationCVE-2026-28479Fix available8.7 High
- openclawOpenClaw < 2026.2.15 - Denial of Service via Unbounded Response Parsing in web_fetch ToolCVE-2026-28394Fix available6.9 Medium
- openclawOpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injectionCVE-2026-27009Fix available5.8 Medium
- openclawOpenClaw hardened the skill download target directory validationCVE-2026-27008Fix available6.8 Medium
- openclawOpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreationCVE-2026-27007Fix available4.8 Medium
- openclawOpenClaw session tool visibility hardening and Telegram webhook secret fallbackCVE-2026-27004Fix available6.9 Medium
- openclawOpenClaw: Telegram bot token exposure via logsCVE-2026-27003Fix available6.9 Medium
- openclawOpenClaw: Docker container escape via unvalidated bind mount config injectionCVE-2026-27002Fix available7.7 High
- openclawOpenClaw: Unsanitized CWD path injection into LLM promptsCVE-2026-27001Fix available8.6 High
- openclawOpenClaw 2026.1.29-beta.1 < 2026.2.14 - Authentication Bypass in Sandbox Browser Bridge ServerCVE-2026-28468Fix available8.5 High
- openclawOpenClaw < 2026.2.14 - SSRF via Feishu Extension Media FetchingCVE-2026-28451Fix available6.3 Medium
- openclawOpenClaw < 2026.2.14 - Local File Inclusion via mediaPath Parameter in BlueBubbles Media HandlingCVE-2026-29611Fix available8.2 High
- openclawOpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process CleanupCVE-2026-27486Fix available4.3 Medium
- openclawOpenClaw < 2026.2.14 - OAuth State Validation Bypass in Manual Chutes Login FlowCVE-2026-28477Fix available5.9 Medium
- openclawOpenClaw: Prevent shell injection in macOS keychain credential writeCVE-2026-27487Fix available7.6 High
- openclawOpenClaw < 2026.2.13 - Path Traversal in Trace and Download Output PathsCVE-2026-28462Fix available8.7 High
- openclawOpenClaw has a Path Traversal in Browser Download FunctionalityCVE-2026-26972Fix available6.7 Medium
- openclawOpenClaw 2026.1.5 < 2026.2.14 - Arbitrary Code Execution via Unsafe Hook Module Path HandlingCVE-2026-28456Fix available8.6 High
- openclawOpenClaw < 2026.2.12 - Path Traversal via Unsanitized sessionId and sessionFile ParametersCVE-2026-28482Fix available8.4 High
- openclawOpenClaw < 2026.2.14 - Command Hijacking via Unsafe PATH HandlingCVE-2026-29610Fix available7.7 High
- openclawOpenClaw < 2026.2.14 - Server-Side Request Forgery in Tlon Extension AuthenticationCVE-2026-28476Fix available6.3 Medium
- openclawOpenClaw < 2026.2.14 - Webhook Signature Verification Bypass via ngrok Loopback CompatibilityCVE-2026-29606Fix available6.3 Medium
- openclawOpenClaw < 2026.2.14 - Identity Spoofing via Mutable Username in Telegram Allowlist AuthorizationCVE-2026-28480Fix available6.9 Medium
- openclawOpenClaw < 2026.2.14 - Cross-Account Policy Context Misrouting via Shared Webhook Path AmbiguityCVE-2026-28469Fix available8.2 High
- openclaw, clawdbot +1 moreOpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpointsCVE-2026-26317Fix available7.1 High
- openclawOpenClaw < 2026.2.13 - Denial of Service via Unbounded Webhook Request Body BufferingCVE-2026-28478Fix available8.7 High
- openclawOpenClaw < 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchiveCVE-2026-28452Fix available6.7 Medium
- openclawOpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File DecodingCVE-2026-29612Fix available6.8 Medium
- openclawOpenClaw < 2026.2.14 - Denial of Service via Unbounded URL-backed Media FetchCVE-2026-29609Fix available8.7 High
- openclawOpenClaw < 2026.2.14 - Privilege Escalation in Slack Slash Command Handler via Direct MessagesCVE-2026-28392Fix available8.2 High
- openclawOpenClaw < 2026.2.14 - Arbitrary File Read via Shell Expansion in Safe Bins AllowlistCVE-2026-28463Fix available8.6 High
- openclawOpenClaw has a command injection in maintainer clawtributors updaterCVE-2026-26323Fix available8.6 High
- openclawOpenClaw has a path traversal in browser upload allows local file readCVE-2026-26329Fix available7.1 High
- openclaw, clawdbot +1 moreOpenClaw iMessage group allowlist authorization inherited DM pairing-store identitiesCVE-2026-26328Fix available6.5 Medium
- openclawOpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinningCVE-2026-26327Fix available7.1 High
- openclawOpenClaw skills.status could leak secrets to operator.read clientsCVE-2026-26326Fix available5.3 Medium
- openclawOpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvalsCVE-2026-26325Fix available7.2 High
- openclawOpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)CVE-2026-26324Fix available7.5 High
- openclawOpenClaw Gateway tool allowed unrestricted gatewayUrl overrideCVE-2026-26322Fix available7.6 High
- Show moreLoading…