# clawdbot (npm) vulnerabilities 10 known vulnerabilities (6 high, 4 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 2026.1.24 (Jan 25, 2026): affected by 4 advisories - Newest unaffected release: Every release is affected by at least one advisory - Weekly downloads: 2,134 - Dependents: 0 - Releases: 37 since 2026.1.4 (Jan 4, 2026) - Registry: https://www.npmjs.com/package/clawdbot - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-29612: 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it) - CVE-2026-28480: 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it) - CVE-2026-28478: 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it) - CVE-2026-28469: 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it) - CVE-2026-28452: 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it) - CVE-2026-26328: 2026.1.4-1 to 2026.1.24 (through the newest release) - CVE-2026-26317: 2026.1.4-1 to 2026.1.24-3 (2026.1.24 is outside it) - CVE-2026-25157: 2026.1.4-1 to 2026.1.24 (through the newest release) - CVE-2026-24763: 2026.1.4-1 to 2026.1.24 (through the newest release) - CVE-2026-25253: 2026.1.4-1 to 2026.1.24 (through the newest release) ## Advisories (10) ### [CVE-2026-29612](https://cve.now/CVE-2026-29612): OpenClaw \< 2026.2.14 - Denial of Service via Large Base64 Media File Decoding - Severity: Medium 6.8 - Published: Mar 5, 2026 - Affected: through 2026.1.24-3. - Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.1.24, is not affected. - 96% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-28480](https://cve.now/CVE-2026-28480): OpenClaw \< 2026.2.14 - Identity Spoofing via Mutable Username in Telegram Allowlist Authorization - Severity: Medium 6.9 - Published: Mar 5, 2026 - Affected: through 2026.1.24-3. - Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.1.24, is not affected. - 96% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-28478](https://cve.now/CVE-2026-28478): OpenClaw \< 2026.2.13 - Denial of Service via Unbounded Webhook Request Body Buffering - Severity: High 8.7 - Published: Mar 5, 2026 - Affected: through 2026.1.24-3. - Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.1.24, is not affected. - 96% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-28469](https://cve.now/CVE-2026-28469): OpenClaw \< 2026.2.14 - Cross-Account Policy Context Misrouting via Shared Webhook Path Ambiguity - Severity: High 8.2 - Published: Mar 5, 2026 - Affected: through 2026.1.24-3. - Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.1.24, is not affected. - 96% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-28452](https://cve.now/CVE-2026-28452): OpenClaw \< 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive - Severity: Medium 6.7 - Published: Mar 5, 2026 - Affected: through 2026.1.24-3. - Fixed in 2026.1.24 (released Jan 25, 2026, 39 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.1.24, is not affected. - 96% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-26328](https://cve.now/CVE-2026-26328): OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities - Severity: Medium 6.5 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.14. - No fix released. The advisory names 2026.2.14 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected. - 100% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-26317](https://cve.now/CVE-2026-26317): OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints - Severity: High 7.1 - Published: Feb 19, 2026 - Affected: through 2026.1.24-3. - Fixed in 2026.1.24 (released Jan 25, 2026, 25 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.1.24, is not affected. - 96% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-25157](https://cve.now/CVE-2026-25157): OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand - Severity: High 7.8 - Published: Feb 4, 2026 - Affected: fixed in 2026.1.29. - No fix released. The advisory names 2026.1.29 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected. - 100% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-24763](https://cve.now/CVE-2026-24763): Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variable - Severity: High 8.8 - Published: Feb 2, 2026 - Affected: fixed in 2026.1.29. - No fix released. The advisory names 2026.1.29 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected. - 100% of clawdbot downloads last week were affected versions (1.3K). ### [CVE-2026-25253](https://cve.now/CVE-2026-25253): OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket… - Severity: High 8.8 - Published: Feb 1, 2026 - Affected: fixed in 2026.1.29. - No fix released. The advisory names 2026.1.29 as the fix, which the registry doesn't have yet. The latest release, 2026.1.24, is still affected. - 100% of clawdbot downloads last week were affected versions (1.3K). --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/clawdbot Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.