Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File ReadCVE-2026-32846Fix available8.7 High
- openclawOpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript FilesCVE-2026-33572Fix available6.8 Medium
- openclawOpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCPCVE-2026-32917Fix available9.2 Critical
- openclawOpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook RequestCVE-2026-32980Fix available8.7 High
- openclawOpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device PairingCVE-2026-32987Fix available9.3 Critical
- openclawOpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error LogsCVE-2026-32982Fix available8.7 High
- openclawOpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret ValidationCVE-2026-34505Fix available6.9 Medium
- openclawOpenClaw < 2026.3.12 - Forged Event Injection via Feishu Webhook Verification TokenCVE-2026-32974Fix available8.8 High
- openclawOpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC ParametersCVE-2026-33573Fix available8.7 High
- openclawOpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth ConnectionsCVE-2026-22172Fix available9.4 Critical
- openclawOpenClaw < 2026.3.11 - Session Sandbox Escape via session_status ToolCVE-2026-32918Fix available9.2 Critical
- openclawOpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace PluginsCVE-2026-32920Fix available8.6 High
- openclawOpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug EndpointsCVE-2026-32914Fix available8.7 High
- openclawOpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path NormalizationCVE-2026-32973Fix available8.8 High
- openclawOpenClaw < 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in FeishuCVE-2026-32924Fix available6.9 Medium
- openclawOpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.requestCVE-2026-32972Fix available7.1 High
- openclawOpenClaw < 2026.3.12 - Long-lived Credential Exposure in Pairing Setup CodesCVE-2026-33575Fix available8.6 High
- openclawOpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser AllowlistCVE-2026-32975Fix available6.9 Medium
- openclawOpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist EnforcementCVE-2026-32923Fix available5.3 Medium
- openclawOpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefsCVE-2026-32970Fix available2.0 Low
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File CreationCVE-2026-32988Fix available5.8 Medium
- openclawOpenClaw < 2026.3.11 - Unauthorized Session Reset via agent Slash CommandsCVE-2026-32919Fix available6.9 Medium
- openclawOpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script RunnersCVE-2026-32978Fix available9.4 Critical
- openclawOpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel CommandsCVE-2026-32976Fix available7.1 High
- openclawOpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended CommandsCVE-2026-32971Fix available7.3 High
- openclawOpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host ApprovalCVE-2026-32979Fix available7.0 High
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control SurfaceCVE-2026-32915Fix available9.3 Critical
- openclawOpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotateCVE-2026-32922Fix available9.4 Critical
- openclawOpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin ScopesCVE-2026-32916Fix available9.2 Critical
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit PathCVE-2026-32977Fix available5.8 Medium
- openclawOpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy modeCVE-2026-32302Fix available8.1 High
- openclawOpenClaw < 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels GatewayCVE-2026-32031Fix available6.3 Medium
- openclawOpenClaw < 2026.2.26 - Sender Authorization Bypass in Slack System Event HandlersCVE-2026-32895Fix available5.3 Medium
- openclawOpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent SymlinkCVE-2026-32055Fix available7.2 High
- openclawOpenClaw < 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist ConfigurationCVE-2026-34506Fix available2.3 Low
- openclawOpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills DownloadCVE-2026-33574Fix available5.8 Medium
- openclawOpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.runCVE-2026-32921Fix available5.3 Medium
- openclawA remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers...CVE-2026-30741Public exploit9.8 Critical
- openclawOpenClaw < 2026.3.7 - Sandbox Escape via /acp spawn CommandCVE-2026-27646Fix available5.8 Medium
- openclawOpenClaw < 2026.3.7 - Shell Approval Gating Bypass via Dispatch Wrapper Depth MismatchCVE-2026-27183Fix available2.1 Low
- openclawOpenClaw < 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin RedirectsCVE-2026-32913Public exploitFix available8.8 High
- openclawOpenClaw 2026.1.5 < 2026.2.12 - Missing Authentication in Browser Control HTTP EndpointsCVE-2026-284857.5 High
- openclawOpenClaw < 2026.2.22 BlueBubbles - Access Control Bypass via Empty allowFrom ConfigurationCVE-2026-22170Fix available6.3 Medium
- openclawOpenClaw Canvas Authentication Bypass VulnerabilityCVE-2026-3690Fix available7.4 High
- openclawOpenClaw < 2026.2.23 - Sandbox Boundary Bypass via Image Tool workspaceOnly BypassCVE-2026-32002Fix available6.0 Medium
- openclawOpenClaw < 2026.2.22 - Incomplete IPv4 Special-Use Range Blocking in SSRF GuardCVE-2026-32019Fix available2.3 Low
- openclawOpenClaw < 2026.2.26 - Cross-Account Authorization Bypass in DM Pairing StoreCVE-2026-32067Fix available2.0 Low
- openclawOpenClaw < 2026.2.25 - Authorization Bypass in Interactive Callbacks via Sender Check SkipCVE-2026-32005Fix available7.6 High
- openclawOpenClaw < 2026.2.19 - Race Condition in Sandbox Registry Write OperationsCVE-2026-32018Fix available2.0 Low
- openclawOpenClaw < 2026.2.22 - Node Role Device-Identity Bypass via WebSocket AuthenticationCVE-2026-32001Fix available5.3 Medium
- Show moreLoading…