Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-WhitelistingCVE-2026-41366Fix available6.0 Medium
- openclawOpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media DownloadCVE-2026-41345Fix available6.0 Medium
- openclawOpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink TraversalCVE-2026-41397Fix available7.6 High
- openclawOpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust RootCVE-2026-41396Fix available8.5 High
- openclawOpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin InstallationCVE-2026-41377Fix available5.1 Medium
- openclawOpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar UploadCVE-2026-41364Fix available7.2 High
- openclawOpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin DownloadCVE-2026-41302Fix available4.8 Medium
- openclawOpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox BackendsCVE-2026-41357Fix available2.0 Low
- openclawOpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread HistoryCVE-2026-41365Fix available5.3 Medium
- openclawOpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth ConcurrencyCVE-2026-41343Fix available6.9 Medium
- openclawOpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender ValidationCVE-2026-41376Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable OverrideCVE-2026-41336Fix available8.5 High
- openclawOpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted MessagesCVE-2026-41406Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner EscalationCVE-2026-41329Fix available9.0 Critical
- openclawOpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope BypassCVE-2026-41402Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction BypassCVE-2026-41385Fix available7.1 High
- openclawOpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL HandlingCVE-2026-41391Fix available5.8 Medium
- openclawOpenClaw < 2026.3.31 - Callback Origin Mutation in Plivo Voice-call ReplayCVE-2026-41337Fix available6.3 Medium
- openclawOpenClaw < 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth RoutesCVE-2026-41394Fix available8.8 High
- openclawOpenClaw - Shell-Bleed Protection Preflight Validation BypassCVE-2026-34425Fix available5.3 Medium
- openclawOpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env FileCVE-2026-41294Fix available8.5 High
- openclawOpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier ExecutablesCVE-2026-41380Fix available7.0 High
- openclawOpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset CommandCVE-2026-41371Fix available8.4 High
- openclawOpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script WrapperCVE-2026-41390Fix available7.0 High
- openclawOpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment SanitizationCVE-2026-41387Fix available8.5 High
- openclawOpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use RangesCVE-2026-41361Fix available5.1 Medium
- openclawOpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component InteractionsCVE-2026-41367Fix available5.3 Medium
- openclawOpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance GuardCVE-2026-41299Fix available7.1 High
- openclawOpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose ParameterCVE-2026-41344Fix available5.3 Medium
- openclawOpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable BlocklistCVE-2026-41332Fix available5.8 Medium
- openclawOpenClaw < 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter BypassCVE-2026-41368Fix available7.1 High
- openclawOpenClaw < 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket UpgradesCVE-2026-41399Fix available8.7 High
- openclawOpenClaw 2026.2.6 < 2026.3.28 - Arbitrary File Read via Feishu upload_image ParameterCVE-2026-41363Fix available6.0 Medium
- openclawOpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval CommandsCVE-2026-41303Public exploitFix available8.7 High
- openclawOpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote OnboardingCVE-2026-41342Fix available7.4 High
- openclawOpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3CVE-2026-41395Fix available8.2 High
- openclawOpenClaw < 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal ProviderCVE-2026-34504Fix available6.9 Medium
- openclawOpenClaw < 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token RevocationCVE-2026-34503Fix available8.6 High
- openclawOpenClaw < 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl ParametersCVE-2026-33581Fix available7.1 High
- openclawOpenClaw < 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret AuthenticationCVE-2026-33580Fix available6.3 Medium
- openclawOpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair ApprovalCVE-2026-33579Public exploitFix available9.4 Critical
- openclawOpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser ExtensionsCVE-2026-33578Fix available5.3 Medium
- openclawOpenClaw < 2026.3.28 - Insufficient Scope Validation in node.pair.approveCVE-2026-33577Fix available8.6 High
- openclawOpenClaw < 2026.3.28 - Unauthorized Media Download via Zalo ChannelCVE-2026-33576Fix available6.9 Medium
- openclawOpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat CommandsCVE-2026-35620Fix available5.3 Medium
- openclawOpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.requestCVE-2026-35653Fix available7.2 High
- openclawOpenClaw < 2026.3.24 - Privilege Escalation via chat.send to Allowlist PersistenceCVE-2026-35621Fix available7.1 High
- openclawOpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook InstallationCVE-2026-35641Fix available8.4 High
- openclawOpenClaw < 2026.3.24 - Authorization Bypass via HTTP /v1/models EndpointCVE-2026-35619Fix available5.3 Medium
- openclawOpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body ParsingCVE-2026-35665Fix available6.9 Medium
- Show moreLoading…