Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster ExtensionCVE-2026-31995Fix available5.8 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via Wrapper Binary Unwrapping in system.runCVE-2026-27566Fix available7.1 High
- openclawOpenClaw < 2026.2.22 - Sender Authorization Bypass via Identity Collision in toolsBySenderCVE-2026-32039Fix available6.0 Medium
- openclawOpenClaw < 2026.2.25 - Unauthorized Reaction Status Event Enqueue via Access Check BypassCVE-2026-32050Fix available6.3 Medium
- openclawOpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf PathsCVE-2026-27523Fix available6.9 Medium
- openclawOpenClaw < 2026.2.25 - Webhook Replay Attack via Missing Durable Replay SuppressionCVE-2026-28449Fix available6.3 Medium
- openclawOpenClaw 2026.2.22 < 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIdsCVE-2026-31998Fix available8.3 High
- openclawOpenClaw < 2026.2.22 - Authentication Token Reuse in Owner ID Prompt Hashing FallbackCVE-2026-32897Fix available6.3 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program ParameterCVE-2026-32010Fix available5.8 Medium
- openclawOpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Fallback in Group AllowlistCVE-2026-32006Fix available2.3 Low
- openclawOpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication BypassCVE-2026-32025Fix available7.5 High
- openclawOpenClaw < 2026.2.21 - Client IP Spoofing via X-Forwarded-For Header ParsingCVE-2026-32029Fix available6.3 Medium
- openclawOpenClaw < 2026.2.22 - Remote Code Execution via Shell Startup Environment Variable Injection in system.runCVE-2026-32056Fix available7.7 High
- openclawOpenClaw < 2026.2.21 - Prototype Pollution via Debug Override PathCVE-2026-27524Fix available2.3 Low
- openclawOpenClaw < 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary ValidationCVE-2026-32033Fix available6.0 Medium
- openclawOpenClaw 2026.1.21 < 2026.2.19 - PATH Hijacking Bypass in tools.exec.safeBins Allowlist ValidationCVE-2026-32015Fix available7.3 High
- openclawOpenClaw 2026.2.19-2 < 2026.2.21 - Command Injection via Newline in systemd Unit GenerationCVE-2026-32063Fix available6.9 Medium
- openclawOpenClaw < 2026.2.25 - Authentication Bypass via Control UI client.id ParameterCVE-2026-32057Fix available6.0 Medium
- openclawOpenClaw < 2026.2.22 - Gateway Token Disclosure via Chrome CDP ProbeCVE-2026-22174Fix available5.9 Medium
- openclawOpenClaw < 2026.2.19 - Command Injection via Unescaped Environment Variables in Windows Scheduled Task Script GenerationCVE-2026-22176Fix available6.9 Medium
- openclawOpenClaw < 2026.2.21 - Insecure Control UI Authentication over Plaintext HTTPCVE-2026-32034Fix available6.1 Medium
- openclawOpenClaw < 2026.2.19 - Arbitrary File Write via Short-Option Bypass in exec AllowlistCVE-2026-32017Fix available6.0 Medium
- openclawOpenClaw < 2026.2.22 - Authorization Bypass via Display Name Collision in Feishu allowFromCVE-2026-32021Fix available6.3 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.runCVE-2026-22179Fix available7.5 High
- openclawOpenClaw < 2026.2.25 - Privilege Escalation via Unpaired Device Identity in Shared Gateway AuthenticationCVE-2026-32042Fix available8.7 High
- openclawOpenClaw < 2026.2.21 - Arbitrary Local File Read via Browser Navigation GuardCVE-2026-32008Fix available7.1 High
- openclawOpenClaw < 2026.2.19 - Local Command Injection via Unsafe cmd Argument Handling in Windows Scheduled Task Script GenerationCVE-2026-31994Fix available6.9 Medium
- openclawOpenClaw < 2026.2.23 - Sandbox Bypass in apply_patch Tool via Workspace-Only Check BypassCVE-2026-32007Fix available7.6 High
- openclawOpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variable Trusted Prefix FallbackCVE-2026-22217Fix available5.8 Medium
- openclawOpenClaw < 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles PluginCVE-2026-32896Fix available6.3 Medium
- openclawOpenClaw < 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBinsCVE-2026-32009Fix available7.0 High
- openclawOpenClaw < 2026.3.2 - Tar Archive Safety Bypass in Skills InstallationCVE-2026-32044Fix available6.7 Medium
- openclawOpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript HandlerCVE-2026-32035Fix available5.8 Medium
- openclawOpenClaw < 2026.3.2 - Authentication Bypass via Encoded Path in /api/channels RouteCVE-2026-32004Fix available8.3 High
- openclawOpenClaw < 2026.2.25 - Missing Authorization Check in Discord DM Reaction IngressCVE-2026-32028Fix available6.3 Medium
- openclawOpenClaw < 2026.3.2 - Arbitrary File Write via ZIP Extraction Parent Symlink Race ConditionCVE-2026-276705.8 Medium
- openclawOpenClaw < 2026.3.2 - Path Confinement Bypass in Browser Output and File Write OperationsCVE-2026-22180Fix available4.8 Medium
- openclawOpenClaw < 2026.3.2 - DNS Pinning Bypass via Environment Proxy Configuration in web_fetchCVE-2026-22181Fix available6.1 Medium
- openclawOpenClaw 2026.3.1 < 2026.3.2 - Approval Integrity Bypass via system.run argv RewritingCVE-2026-29608Fix available5.4 Medium
- openclawOpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body ParsingCVE-2026-32011Fix available8.7 High
- openclawOpenClaw < 2026.3.2 - Symlink Traversal in stageSandboxMedia DestinationCVE-2026-31990Fix available6.9 Medium
- openclawOpenClaw < 2026.2.19 - Sensitive File Disclosure via stageSandboxMedia Path TraversalCVE-2026-32030Fix available8.2 High
- openclawOpenClaw < 2026.2.17 - Arbitrary File Read via $include Directive Path TraversalCVE-2026-32061Fix available6.7 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via Shell Line-Continuation Command Substitution in system.runCVE-2026-28460Fix available6.0 Medium
- openclawOpenClaw < 2026.2.21 - Environment Variable Injection via Config env.varsCVE-2026-22177Fix available6.9 Medium
- openclawOpenClaw < 2026.2.22 - Arbitrary Shell Execution via Unvalidated SHELL Environment VariableCVE-2026-32032Fix available7.3 High
- openclawOpenClaw < 2026.2.25 - Sender Policy Bypass in Slack Reaction and Pin Event HandlersCVE-2026-32899Fix available5.3 Medium
- openclawOpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv CarriersCVE-2026-32052Fix available5.8 Medium
- openclawOpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd ParameterCVE-2026-32043Fix available5.9 Medium
- openclawOpenClaw < 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC ObserverCVE-2026-32064Fix available8.5 High
- Show moreLoading…