Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.5.12 - Privilege Escalation in Slack Plugin Approvals via Exec Approver GateCVE-2026-32906Fix available2.3 Low
- openclawOpenClaw < 2026.5.4 - Unauthorized Device-Pairing Bootstrap Code Issuance via Chat CommandCVE-2026-32905Fix available8.7 High
- openclaw crabboxCrabbox < v0.12.0 Environment Variable Information DisclosureCVE-2026-8634Fix available9.3 Critical
- openclaw crabboxCrabbox < v0.12.0 Privilege Escalation via Agent Ticket EndpointsCVE-2026-86298.6 High
- openclaw crabboxCrabbox < v0.12.0 Authentication Bypass via Header SpoofingCVE-2026-8621Fix available8.7 High
- openclaw crabboxCrabbox < 0.9.0 Path Traversal via Islo Provider Workspace ResolutionCVE-2026-45224Fix available6.8 Medium
- openclaw crabboxCrabbox < 0.9.0 Authentication Bypass via Admin Claim InjectionCVE-2026-452237.7 High
- openclawOpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authenticationCVE-2026-83056.9 Medium
- openclawOpenClaw < 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist BypassCVE-2026-45006Fix available7.7 High
- openclawOpenClaw < 2026.4.23 - Arbitrary Code Execution via setup-api.js in Current Working DirectoryCVE-2026-45004Fix available8.4 High
- openclawOpenClaw < 2026.4.23 - Webhook Route Secret Cache Not Invalidated After RotationCVE-2026-45005Fix available5.9 Medium
- openclawOpenClaw 2026.3.22 < 2026.4.5 - Symlink Traversal in Remote Marketplace Repository Path HandlingCVE-2026-43570Fix available6.0 Medium
- openclawOpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config EndpointCVE-2026-44994Fix available6.3 Medium
- openclawOpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS BridgeCVE-2026-44113Fix available8.3 High
- openclawOpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge WritesCVE-2026-44112Fix available8.4 High
- openclawOpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec AllowlistCVE-2026-44115Fix available8.7 High
- openclawOpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Token HeaderCVE-2026-44118Fix available8.5 High
- openclawOpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv FilesCVE-2026-45003Fix available4.1 Medium
- openclawOpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child SessionsCVE-2026-44997Fix available2.3 Low
- openclawOpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL ValidationCVE-2026-44116Fix available6.9 Medium
- openclawOpenClaw < 2026.4.15 - Arbitrary Local File Read via Webchat Audio EmbeddingCVE-2026-44996Fix available6.3 Medium
- openclawOpenClaw < 2026.4.21 - Authorization Bypass in Owner-Enforced Commands via Wildcard Channel SendersCVE-2026-44991Fix available2.3 Low
- openclawOpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool AccessCVE-2026-45001Fix available6.0 Medium
- openclawOpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP ToolsCVE-2026-44998Fix available2.3 Low
- openclawOpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenvCVE-2026-44992Fix available4.1 Medium
- openclawOpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile CreationCVE-2026-45000Fix available2.3 Low
- openclawOpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media UploadCVE-2026-44117Fix available6.3 Medium
- openclawOpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment VariablesCVE-2026-44995Fix available5.4 Medium
- openclawOpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness EventsCVE-2026-44999Fix available6.3 Medium
- openclawOpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenvCVE-2026-44114Fix available8.5 High
- openclawOpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card ActionsCVE-2026-44993Fix available2.3 Low
- openclawOpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template MappingCVE-2026-45002Fix available6.3 Medium
- openclawOpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread ContextCVE-2026-41358Fix available2.3 Low
- openclawOpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing ActionsCVE-2026-41909Fix available5.3 Medium
- openclawOpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media RouteCVE-2026-41908Fix available2.3 Low
- openclawOpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_getCVE-2026-44111Fix available2.3 Low
- openclawOpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read via Unvalidated Tool-Result Media PathsCVE-2026-41389Fix available6.3 Medium
- openclawOpenClaw < 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action ValidationCVE-2026-44109Fix available9.2 Critical
- openclawOpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing StoreCVE-2026-44110Fix available7.7 High
- openclawOpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef ResolutionCVE-2026-43585Fix available9.2 Critical
- openclawOpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URLCVE-2026-43576Fix available4.9 Medium
- openclawOpenClaw 2026.4.9 < 2026.4.10 - Sender Policy Bypass in Host Media Attachment ReadsCVE-2026-42438Fix available4.9 Medium
- openclawOpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media TagsCVE-2026-43533Fix available8.9 High
- openclawOpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet ExecutionCVE-2026-43530Fix available8.7 High
- openclawOpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message ToolsCVE-2026-42433Fix available7.1 High
- openclawOpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec RoutingCVE-2026-42434Fix available8.7 High
- openclawOpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser InteractionsCVE-2026-43580Fix available4.9 Medium
- openclawOpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction RoutesCVE-2026-43577Fix available7.1 High
- openclawOpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider AuthCVE-2026-43569Fix available7.7 High
- openclawOpenClaw < 2026.4.10 - SSRF Policy Bypass in Existing-Session Browser Interaction RoutesCVE-2026-43573Fix available4.9 Medium
- Show moreLoading…