Skip to contentOpenclaw vulnerabilities
Newest
- openclawOpenClaw before 2026.8.1 Authorization Bypass via sessions.createCVE-2026-1005625.3 Medium
- openclawOpenClaw before 2026.8.1 Authentication Bypass via Exec WrapperCVE-2026-1005618.6 High
- openclawOpenClaw before 2026.8.1 Reusable Exec Approvals Authorization BypassCVE-2026-1005607.7 High
- openclawOpenClaw before 2026.8.1 Command Injection via Escaped NewlinesCVE-2026-1005598.6 High
- openclawOpenClaw before 2026.8.1 Resource Exhaustion via WebSocket UpgradeCVE-2026-1005588.7 High
- openclawOpenClaw before 2026.8.1 Authorization Bypass via Skill Tool DispatchCVE-2026-1005578.7 High
- openclawOpenClaw before 2026.8.1 Authentication Bypass via Session ResetCVE-2026-1005565.3 Medium
- openclawOpenClaw before 2026.8.1 DNS Rebinding via attachment deliveryCVE-2026-1005557.1 High
- openclawOpenClaw before 2026.8.1 Canvas Capability Revocation BypassCVE-2026-1005542.3 Low
- openclawOpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpinCVE-2026-1005535.3 Medium
- openclawOpenClaw before 2026.8.1 Policy Bypass via Native ToolsCVE-2026-1005528.7 High
- openclawOpenClaw iOS Control UI TLS Pin Enforcement BypassCVE-2026-1005519.0 Critical
- openclawOpenClaw before 2026.8.1 Authentication Bypass via Access GroupCVE-2026-1005505.3 Medium
- openclawOpenClaw before 2026.8.1 Path Traversal via QQBot voice filenamesCVE-2026-1005495.3 Medium
- openclawOpenClaw before 2026.8.1 Credential Exposure via Embedding FallbackCVE-2026-1005486.0 Medium
- openclawOpenClaw before 2026.8.1 Authentication Bypass via File URLCVE-2026-1005476.8 Medium
- openclawOpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice TranscriptCVE-2026-1005466.1 Medium
- openclawOpenClaw before 2026.8.1 Policy Bypass via Session Filename GenerationCVE-2026-1005456.0 Medium
- openclaw voice-callopenclaw voice-call before 2026.8.1 Authorization BypassCVE-2026-1005448.7 High
- openclawOpenClaw before 2026.8.1 Information Disclosure via Configuration HashCVE-2026-1005437.7 High
- openclawOpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2CVE-2026-1005422.3 Low
- openclaw matrixOpenClaw Matrix before 2026.8.1 Authorization Bypass via Case FoldingCVE-2026-1005417.7 High
- openclaw feishuOpenClaw Feishu before 2026.8.1 Authentication Bypass via Disabled AccountCVE-2026-1005407.6 High
- openclawOpenClaw before 2026.8.1 Memory Access Control BypassCVE-2026-1005392.1 Low
- openclawOpenClaw before 2026.8.1 Local File Read via Outbound AttachmentsCVE-2026-1005387.1 High
- openclawOpenClaw before 2026.8.1 Authentication Bypass via Active MemoryCVE-2026-1005372.3 Low
- openclawOpenClaw before 2026.8.1 Path Traversal via Structured AttachmentsCVE-2026-1005367.1 High
- openclawOpenClaw before 2026.8.1 Privilege Escalation via Session MemoryCVE-2026-1005357.7 High
- openclawOpenClaw before 2026.8.1 Session Cancellation Authorization BypassCVE-2026-1005342.3 Low
- openclawOpenClaw before 2026.8.1 Path Traversal via Unicode FallbackCVE-2026-1005336.0 Medium
- openclaw whatsappopenclaw WhatsApp before 2026.8.1 Authentication BypassCVE-2026-1005327.2 High
- openclaw slackopenclaw Slack before 2026.8.1 Authorization BypassCVE-2026-1005317.1 High
- openclawOpenClaw before 2026.8.1 Exec Approval Directory BindingCVE-2026-1005308.5 High
- openclawOpenClaw before 2026.8.1 Authorization Scope Widening via File-TransferCVE-2026-1005297.4 High
- openclawOpenClaw before 2026.8.1 Credential Disclosure via Provider EndpointCVE-2026-1005285.9 Medium
- openclawOpenClaw before 2026.8.2 Denial of Service via Browser RelayCVE-2026-1005276.9 Medium
- openclaw discordVulnerability in discordCVE-2026-1005266.0 Medium
- openclaw diagnostics-prometheusOpenClaw diagnostics-prometheus before 2026.9.3 Authentication BypassCVE-2026-1005255.3 Medium
- openclaw iosOpenClaw iOS before 2026.8.11 Credential Exposure via Deep-Link URL LoggingCVE-2026-958157.2 High
- openclaw clawscanOpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factorsCVE-2026-918362.4 Low
- openclaw clawscanOpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflictCVE-2026-918352.4 Low
- openclawOpenClaw < 2026.5.18 Authorization Bypass via Glob MatchingCVE-2026-622297.7 High
- openclawOpenClaw < 2026.6.5 Authorization Bypass via Node Exec ApprovalsCVE-2026-622287.7 High
- openclawOpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser SnapshotCVE-2026-622274.9 Medium
- openclawOpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act RouteCVE-2026-622265.1 Medium
- openclawOpenClaw < 2026.5.18 Authorization Bypass via Skill Command DispatchCVE-2026-622252.3 Low
- openclaw msteamsOpenClaw MS Teams < 2026.5.12 Authorization BypassCVE-2026-622242.3 Low
- openclawOpenClaw < 2026.5.18 Authorization Bypass via Device-pairCVE-2026-622237.7 High
- openclawOpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-modeCVE-2026-622227.1 High
- openclawOpenClaw 2026.5.12 < 2026.5.26 Authorization Bypass via allowFromCVE-2026-622212.3 Low
- Show moreLoading…