Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw < 2026.5.12 - Slack Reaction Event Notification BypassCVE-2026-53851Fix available6.3 Medium
- openclawOpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus CommandCVE-2026-53850Fix available6.8 Medium
- openclawOpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFromCVE-2026-53849Fix available8.6 High
- openclawOpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command WrappersCVE-2026-53848Fix available2.3 Low
- openclawOpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write ScopeCVE-2026-53847Fix available5.3 Medium
- openclawOpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpathCVE-2026-53846Fix available7.0 High
- openclawOpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook SkippingCVE-2026-53845Fix available2.3 Low
- openclawOpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory SearchCVE-2026-53844Fix available6.0 Medium
- openclawOpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device SessionCVE-2026-53843Fix available8.7 High
- openclawOpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment VariableCVE-2026-53842Fix available7.0 High
- openclawOpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTMLCVE-2026-53841Fix available2.1 Low
- openclawOpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin RedirectsCVE-2026-53840Fix available6.0 Medium
- openclawOpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint ValidationCVE-2026-53839Fix available6.0 Medium
- openclawOpenClaw < 2026.5.27 - Node Pairing State Mutation via ReconnectionCVE-2026-53838Fix available6.0 Medium
- openclawOpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event HandlersCVE-2026-53837Fix available6.3 Medium
- openclawOpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command AliasesCVE-2026-53836Fix available8.7 High
- openclawOpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent BindingsCVE-2026-53835Fix available2.3 Low
- openclawOpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash CommandsCVE-2026-53834Fix available8.2 High
- openclawQQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming CommandCVE-2026-53833Fix available7.4 High
- openclawOpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy ConfigurationCVE-2026-53832Fix available7.4 High
- openclawOpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin AllowlistCVE-2026-53831Fix available7.6 High
- openclawOpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reloadCVE-2026-53830Fix available6.0 Medium
- openclawOpenClaw < 2026.5.18 - Command Truncation in Exec Approval DisplayCVE-2026-53829Fix available8.5 High
- openclawOpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command EnforcementCVE-2026-53828Fix available7.7 High
- openclawOpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action ForwardingCVE-2026-53827Fix available6.0 Medium
- openclawOpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session SpawnCVE-2026-53826Fix available2.3 Low
- openclawOpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write ScopeCVE-2026-53825Fix available7.1 High
- openclawMattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh DelayCVE-2026-53824Fix available6.0 Medium
- openclawOpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFromCVE-2026-53823Fix available8.6 High
- openclawOpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and ExecutionCVE-2026-53822Fix available8.7 High
- openclawOpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocketCVE-2026-53821Fix available8.7 High
- openclawOpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session SpawnCVE-2026-53820Fix available6.9 Medium
- openclawOpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env OverrideCVE-2026-53819Fix available8.7 High
- openclawOpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP LoopbackCVE-2026-53818Fix available6.9 Medium
- openclawOpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device PairingCVE-2026-53817Fix available8.7 High
- openclawOpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired NodeCVE-2026-53816Fix available8.6 High
- openclawOpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read ActionsCVE-2026-53815Fix available7.1 High
- openclawOpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool AuthorityCVE-2026-53814Fix available8.7 High
- openclawOpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root ResolutionCVE-2026-53813Fix available7.3 High
- openclawOpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act InteractionsCVE-2026-53812Fix available4.9 Medium
- openclawOpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFromCVE-2026-53811Fix available7.7 High
- openclawOpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension MetadataCVE-2026-53810Fix available7.7 High
- openclawOpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner PolicyCVE-2026-53809Fix available4.8 Medium
- openclawOpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply FlowCVE-2026-53808Fix available6.0 Medium
- openclawOpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFromCVE-2026-53807Fix available7.7 High
- openclawOpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec RevalidationCVE-2026-53806Fix available7.7 High
- openclawOpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send RouteCVE-2026-35674Fix available8.7 High
- openclawOpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export RoutesCVE-2026-35673Fix available5.9 Medium
- openclawOpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval ButtonsCVE-2026-35630Fix available7.5 High
- openclawOpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom ChecksCVE-2026-34507Fix available2.3 Low
- Show moreLoading…