Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script BindingCVE-2026-41360Fix available5.4 Medium
- openclawOpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect SnapshotCVE-2026-41339Fix available5.3 Medium
- openclawOpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel SetupCVE-2026-41295Fix available8.5 High
- openclawOpenClaw < 2026.4.2 - Authorization Bypass in Session Termination EndpointCVE-2026-41298Fix available5.3 Medium
- openclawOpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI BridgeCVE-2026-41398Fix available2.1 Low
- openclawOpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode PathsCVE-2026-41383Fix available6.1 Medium
- openclawOpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared AuthenticationCVE-2026-41362Fix available2.3 Low
- openclawOpenClaw 2026.2.26 < 2026.3.31 - Denial of Service via Improper Pending Pairing Request Cap EnforcementCVE-2026-41346Fix available6.3 Medium
- openclawOpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairing State Creation via Signature Verification BypassCVE-2026-41301Fix available6.9 Medium
- openclawOpenClaw < 2026.3.31 - Exec Allowlist Bypass via Shell Init-File OptionsCVE-2026-41392Fix available5.4 Medium
- openclawOpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File ConversionCVE-2026-41355Fix available5.4 Medium
- openclawOpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron PersistenceCVE-2026-41359Fix available7.1 High
- openclawOpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed InvocationsCVE-2026-41350Fix available5.3 Medium
- openclawOpenClaw < 2026.3.28 - Privilege Escalation via chat.send to Admin-Class Talk Voice ConfigCVE-2026-41379Fix available7.1 High
- openclawOpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI BackendCVE-2026-41384Fix available8.5 High
- openclawOpenClaw < 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download RedirectCVE-2026-41297Fix available4.8 Medium
- openclawOpenClaw < 2026.3.31 - Disk Exhaustion via Media Download BypassCVE-2026-41408Fix available2.3 Low
- openclawOpenClaw < 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm EndpointsCVE-2026-41375Fix available7.1 High
- openclawOpenClaw < 2026.4.2 - PKCE Verifier Exposure via OAuth State ParameterCVE-2026-34511Fix available6.0 Medium
- openclawOpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation GapsCVE-2026-41382Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord ExtensionCVE-2026-41341Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote OnboardingCVE-2026-41300Fix available6.9 Medium
- openclawOpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request MisclassificationCVE-2026-41403Fix available6.3 Medium
- openclawOpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash CommandsCVE-2026-41348Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area DiscoveryCVE-2026-41393Fix available5.9 Medium
- openclawOpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom MigrationCVE-2026-41340Fix available6.3 Medium
- openclawOpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation HandlingCVE-2026-41388Fix available6.3 Medium
- openclawOpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup CodesCVE-2026-41386Fix available9.1 Critical
- openclawOpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime SelectionCVE-2026-41353Fix available7.6 High
- openclawOpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel AllowlistCVE-2026-41381Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight TranscriptionCVE-2026-41331Fix available6.9 Medium
- openclawOpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent DispatchCVE-2026-41378Fix available7.7 High
- openclawOpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFileCVE-2026-41296Fix available8.8 High
- openclawOpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-callCVE-2026-41400Fix available6.9 Medium
- openclawOpenClaw < 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotateCVE-2026-41356Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Authentication Rate Limiting Bypass via Fake DeviceTokenCVE-2026-41333Fix available6.3 Medium
- openclawOpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host ExecutionCVE-2026-41369Fix available7.1 High
- openclawOpenClaw < 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP DispatchCVE-2026-41370Fix available7.1 High
- openclawOpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy AuthenticationCVE-2026-41404Fix available7.7 High
- openclawOpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patchCVE-2026-41349Fix available8.7 High
- openclawOpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSONCVE-2026-41335Fix available6.9 Medium
- openclawOpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File OperationsCVE-2026-41338Fix available4.3 Medium
- openclawOpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard BypassCVE-2026-41334Fix available7.1 High
- openclawOpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution PolicyCVE-2026-41373Fix available5.8 Medium
- openclawOpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate BypassCVE-2026-41352Fix available7.7 High
- openclawOpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encodingCVE-2026-41351Fix available6.3 Medium
- openclawOpenClaw < 2026.3.31 - Environment Variable Override via Host Exec PolicyCVE-2026-41330Fix available2.0 Low
- openclawOpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member AuthorizationCVE-2026-41374Fix available6.9 Medium
- openclawOpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator EndpointsCVE-2026-41347Fix available2.3 Low
- openclawOpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body ParsingCVE-2026-41405Fix available8.7 High
- Show moreLoading…