npmPackage

clawdbot

10 known vulnerabilities (6 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release: 2026.1.24 (Jan 25, 2026): affected by 4 advisories
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 10 · 6 high, 4 medium

Weekly downloads: 2,134
Dependents: 0
Releases: 37 since 2026.1.4 (Jan 4, 2026)
Registry: npm
Releases read: Nov 8, 2026

Version timeline

CVE-2026-29612
Affects 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it)
CVE-2026-28480
Affects 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it)
CVE-2026-28478
Affects 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it)
CVE-2026-28469
Affects 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it)
CVE-2026-28452
Affects 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it)
CVE-2026-26328
Affects 2026.1.4-1 to 2026.1.24 (through the newest release)
CVE-2026-26317
Affects 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it)
CVE-2026-25157
Affects 2026.1.4-1 to 2026.1.24 (through the newest release)
CVE-2026-24763
Affects 2026.1.4-1 to 2026.1.24 (through the newest release)
CVE-2026-25253
Affects 2026.1.4-1 to 2026.1.24 (through the newest release)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 10

CVE-2026-29612Medium 6.8
OpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File Decoding
Affected: through 2026.1.24-3.
Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2026.1.24, is not affected.
96% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-28480Medium 6.9
OpenClaw < 2026.2.14 - Identity Spoofing via Mutable Username in Telegram Allowlist Authorization
Affected: through 2026.1.24-3.
Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2026.1.24, is not affected.
96% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-28478High 8.7
OpenClaw < 2026.2.13 - Denial of Service via Unbounded Webhook Request Body Buffering
Affected: through 2026.1.24-3.
Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2026.1.24, is not affected.
96% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-28469High 8.2
OpenClaw < 2026.2.14 - Cross-Account Policy Context Misrouting via Shared Webhook Path Ambiguity
Affected: through 2026.1.24-3.
Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2026.1.24, is not affected.
96% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-28452Medium 6.7
OpenClaw < 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive
Affected: through 2026.1.24-3.
Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2026.1.24, is not affected.
96% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-26328Medium 6.5
OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities
Affected: fixed in 2026.2.14.
No fix released. The advisory names 2026.2.14 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected.
100% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-26317High 7.1
OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints
Affected: through 2026.1.24-3.
Fixed in 2026.1.24 (released Jan 25, 2026, 25 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2026.1.24, is not affected.
96% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-25157High 7.8
OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
Affected: fixed in 2026.1.29.
No fix released. The advisory names 2026.1.29 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected.
100% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-24763High 8.8
Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variable
Affected: fixed in 2026.1.29.
No fix released. The advisory names 2026.1.29 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected.
100% of clawdbot downloads last week were affected versions (1.3K).
CVE-2026-25253High 8.8
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket…
Affected: fixed in 2026.1.29.
No fix released. The advisory names 2026.1.29 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected.
100% of clawdbot downloads last week were affected versions (1.3K).