Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group AllowlistCVE-2026-32027Fix available7.1 High
- openclawOpenClaw < 2026.2.24 - Approval Gating Bypass via Dispatch-Wrapper Depth-Cap Mismatch in system.runCVE-2026-32023Fix available6.0 Medium
- openclawOpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID NormalizationCVE-2026-32053Fix available6.9 Medium
- openclawOpenClaw < 2026.2.21 - Arbitrary File Read via grep -e Flag Policy BypassCVE-2026-32022Fix available6.0 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via sort Configuration in safeBinsCVE-2026-22169Fix available7.1 High
- openclawOpenClaw < 2026.2.26- Authentication Bypass via Encoded Dot-Segment Traversal in /api/channelsCVE-2026-32036Fix available8.3 High
- openclawOpenClaw < 2026.2.21 - Authentication Bypass in HTTP Gateway Routes via Tokenless Tailscale AuthCVE-2026-32045Fix available8.2 High
- openclawOpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File NamingCVE-2026-22171Fix available8.8 High
- openclawOpenClaw < 2026.2.23 - HTML Injection via Unvalidated Image MIME Type in Data-URL InterpolationCVE-2026-32040Fix available2.4 Low
- openclawOpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in SandboxCVE-2026-32026Fix available7.1 High
- openclawOpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox FlagCVE-2026-32046Fix available4.8 Medium
- openclawOpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment HandlingCVE-2026-32037Fix available2.3 Low
- openclawOpenClaw 2.0.0-beta3 < 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path TraversalCVE-2026-28393Fix available8.3 High
- openclawOpenClaw < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool ExecutionCVE-2026-32000Fix available5.8 Medium
- openclawOpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -SCVE-2026-31992Fix available7.1 High
- openclawOpenClaw < 2026.2.22 - Path Traversal via Basename-Only Allowlist Matching on macOSCVE-2026-32016Fix available7.3 High
- openclawOpenClaw < 2026.2.22 - Remote Code Execution via SHELLOPTS/PS4 Environment Injection in system.runCVE-2026-32003Fix available7.5 High
- openclawOpenClaw < 2026.2.26 - Node Reconnect Metadata Spoofing via Unsigned Platform FieldsCVE-2026-32014Fix available8.6 High
- openclawOpenClaw Client PKCE Verifier Information Disclosure VulnerabilityCVE-2026-3691Fix available5.3 Medium
- openclawOpenClaw < 2026.2.22 - Symlink Traversal in Avatar HandlingCVE-2026-32024Fix available6.8 Medium
- openclawOpenClaw - Sandbox Network Isolation Bypass via docker.network=container ParameterCVE-2026-32038Fix available9.3 Critical
- openclawOpenClaw < 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory RebindCVE-2026-27545Fix available6.9 Medium
- openclawOpenClaw < 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message ActionsCVE-2026-27522Fix available7.1 High
- openclawOpenClaw < 2026.2.25 - Approval Identity Mismatch in system.run Command ExecutionCVE-2026-32065Fix available5.7 Medium
- openclawOpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval BypassCVE-2026-28466Public exploitFix available9.4 Critical
- openclawOpenClaw 2026.1.16-2 < 2026.2.14 - Path Traversal (Zip Slip) in Archive Extraction via Installation CommandsCVE-2026-28486Fix available6.8 Medium
- openclawOpenClaw < 2026.2.14 - Path Traversal in Sandbox Skill Mirroring via Name ParameterCVE-2026-28457Fix available5.6 Medium
- openclawOpenClaw < 2026.2.12 - Timing Attack in Hooks Token AuthenticationCVE-2026-28464Fix available8.2 High
- openclawOpenClaw < 2026.2.13 - Timing Attack via Hook Token ComparisonCVE-2026-28475Fix available6.3 Medium
- openclawOpenClaw < 2026.2.14 - Zip Slip Path Traversal in TAR Archive ExtractionCVE-2026-28453Fix available8.3 High
- openclawOpenClaw < 2026.2.25 - Symlink Traversal in agents.files MethodsCVE-2026-32013Public exploitFix available8.7 High
- openclawOpenClaw < 2026.2.26 - Approval Context-Binding Weakness in system.run via host=nodeCVE-2026-32058Fix available2.0 Low
- openclaw, openclaw voice-call, openclaw\/voice-call +2 moreOpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media StreamCVE-2026-32062Fix available8.7 High
- openclawOpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit BypassCVE-2026-32049Fix available8.7 High
- openclawOpenClaw Canvas Path Traversal Information Disclosure VulnerabilityCVE-2026-3689Fix available6.5 Medium
- openclawOpenClaw < 2026.2.23 - Exec Approval Bypass via Unrecognized Multiplexer Shell WrappersCVE-2026-22175Fix available7.1 High
- openclawOpenClaw < 2026.2.22 - Authorization Bypass via allow-always Wrapper PersistenceCVE-2026-29607Fix available7.1 High
- openclawOpenClaw < 2026.2.22 - Arbitrary File Read via Symlink Following in Static File HandlerCVE-2026-32020Fix available4.8 Medium
- openclawOpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path HandlingCVE-2026-32054Fix available5.9 Medium
- openclawOpenClaw < 2026.2.19 - ReDoS and Regex Injection via Unescaped Feishu Mention MetadataCVE-2026-22178Fix available6.9 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell ChainsCVE-2026-31993Fix available5.6 Medium
- openclawOpenClaw < 2026.2.21 - Command Injection via cmd.exe /c Trailing Arguments in system.runCVE-2026-22168Fix available7.1 High
- openclawOpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Leakage in Signal Group AllowlistCVE-2026-31991Fix available2.0 Low
- openclawOpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run ApprovalsCVE-2026-31997Fix available4.4 Medium
- openclawOpenClaw < 2026.3.1 - Server-Side Request Forgery via web_search Citation RedirectCVE-2026-31989Fix available5.3 Medium
- openclawOpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool AccessCVE-2026-32051Fix available8.7 High
- openclawOpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution FallbackCVE-2026-31999Fix available5.8 Medium
- openclawOpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawnCVE-2026-32048Fix available7.7 High
- openclawOpenClaw < 2026.3.1 - Unbounded Memory Growth in Zalo Webhook via Query String Key ChurnCVE-2026-284618.7 High
- openclawOpenClaw < 2026.3.1 - Unauthenticated Browser Control Access via Failed Auth BootstrapCVE-2026-32041Fix available7.5 High
- Show moreLoading…