Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action RoutesCVE-2026-42439Fix available4.9 Medium
- openclawOpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation RoutesCVE-2026-43579Fix available6.0 Medium
- openclawOpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay BindingCVE-2026-43581Fix available9.0 Critical
- openclawOpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel SetupCVE-2026-43571Fix available7.7 High
- openclawOpenClaw < 2026.4.10 - Path Traversal in screen_record outPath ParameterCVE-2026-43567Fix available7.1 High
- openclawOpenClaw < 2026.4.14 - Server-Side Request Forgery via Private Network NavigationCVE-2026-43527Fix available6.3 Medium
- openclawOpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation BypassCVE-2026-43582Fix available4.9 Medium
- openclawOpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL HandlingCVE-2026-43526Fix available8.3 High
- openclawOpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env FileCVE-2026-43531Fix available7.0 High
- openclawOpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover ImageCVE-2026-43532Fix available4.9 Medium
- openclawOpenClaw < 2026.4.12 - Improper Authorization via Empty Approver ListsCVE-2026-43574Fix available6.0 Medium
- openclawOpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook EventsCVE-2026-43534Fix available9.3 Critical
- openclawOpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec PolicyCVE-2026-43584Fix available8.7 High
- openclawOpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment InjectionCVE-2026-42435Fix available8.7 High
- openclawOpenClaw 2026.4.5 through 2026.4.9 - Privilege Escalation via Memory Dreaming Configuration in /dreaming EndpointCVE-2026-43568Fix available7.1 High
- openclawOpenClaw 2026.4.10 < 2026.4.14 - Missing Sender Authorization in Microsoft Teams SSO Invoke HandlerCVE-2026-43572Fix available6.3 Medium
- openclawOpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue RecoveryCVE-2026-43583Fix available6.0 Medium
- openclawOpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner DowngradeCVE-2026-43578Fix available9.1 Critical
- openclawOpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime PathCVE-2026-42437Fix available8.2 High
- openclawOpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake EventsCVE-2026-43566Fix available9.1 Critical
- openclawOpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot RoutesCVE-2026-42436Fix available4.9 Medium
- openclawOpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig AliasesCVE-2026-43528Fix available7.1 High
- openclawOpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue BatchesCVE-2026-43535Fix available7.6 High
- openclawOpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper RouteCVE-2026-43575Fix available9.2 Critical
- openclawOpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight ValidatorCVE-2026-43529Fix available2.0 Low
- openclawOpenClaw assertPublicHostname web-fetch.ts server-side request forgeryCVE-2026-6011Fix available6.3 Medium
- openclawOpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec EnvironmentCVE-2026-41915Fix available5.8 Medium
- openclawOpenClaw < 2026.4.8 - Improper Base64 Decoding Size ValidationCVE-2026-42420Fix available5.3 Medium
- openclawOpenClaw < 2026.4.8 - Missing Integrity Verification in Package DownloadsCVE-2026-42428Fix available7.5 High
- openclawOpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect HandlingCVE-2026-42430Fix available4.8 Medium
- openclawOpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP AuthenticationCVE-2026-42429Fix available6.0 Medium
- openclawOpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered NavigationCVE-2026-41912Fix available4.8 Medium
- openclawOpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write ScopeCVE-2026-42426Fix available8.7 High
- openclawOpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_imageCVE-2026-41911Fix available6.0 Medium
- openclawOpenClaw < 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch PathsCVE-2026-41914Fix available5.1 Medium
- openclawOpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token RotationCVE-2026-42421Fix available2.3 Low
- openclawOpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication AttemptsCVE-2026-41913Fix available6.3 Medium
- openclawOpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect BypassCVE-2026-42432Fix available7.3 High
- openclawOpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel WritesCVE-2026-41910Fix available2.3 Low
- openclawOpenClaw < 2026.4.8 - Stale Authentication State via Config ReloadCVE-2026-41916Fix available2.3 Low
- openclawOpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) BypassCVE-2026-42431Fix available7.6 High
- openclawOpenClaw < 2026.4.8 - Role Bypass in device.token.rotate FunctionCVE-2026-42422Fix available7.7 High
- openclawOpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA PathsCVE-2026-42424Fix available5.9 Medium
- openclawOpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout FallbackCVE-2026-42423Fix available7.7 High
- openclawOpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable InjectionCVE-2026-42427Fix available5.8 Medium
- openclawOpenClaw < 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin RedirectsCVE-2026-40037Fix available7.1 High
- openclawOpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway EndpointsCVE-2026-40045Fix available5.9 Medium
- openclawOpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret ComparisonCVE-2026-41407Fix available6.3 Medium
- openclawOpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe KeysCVE-2026-41354Fix available6.3 Medium
- openclawOpenClaw < 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP DiscoveryCVE-2026-41372Fix available6.9 Medium
- Show moreLoading…