# openclaw (npm) vulnerabilities 500 known vulnerabilities (24 critical, 197 high, 226 medium, 53 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 2026.11.1 (Nov 5, 2026): none of the 500 newest advisories affects it; older ones weren't checked - Newest unaffected release: Not known: more than 500 advisories name this package, too many to check every release against - Weekly downloads: 3.4M - Dependents: 150 - Releases: 293 since 0.0.1 (Jan 29, 2026) - Registry: https://www.npmjs.com/package/openclaw - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-62208: 0.0.1 to 2026.6.5-beta.6 (2026.6.5 is outside it) - CVE-2026-62197: 0.0.1 to 2026.6.6-beta.2 (2026.6.6 is outside it) - CVE-2026-53866: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53865: 0.0.1 to 2026.5.2-beta.2 (2026.5.2 is outside it) - CVE-2026-53864: 0.0.1 to 2026.5.26-beta.2 (2026.5.26 is outside it) - CVE-2026-53863: 0.0.1 to 2026.4.25-beta.11 (2026.4.25 is outside it) - CVE-2026-53862: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53861: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53860: 0.0.1 to 2026.5.7-beta.1 (2026.5.7 is outside it) - CVE-2026-53859: 0.0.1 to 2026.5.26-beta.2 (2026.5.26 is outside it) - CVE-2026-53858: 0.0.1 to 2026.5.2-beta.2 (2026.5.2 is outside it) - CVE-2026-53857: 0.0.1 to 2026.5.3-beta.4 (2026.5.3 is outside it) - CVE-2026-53856: 2026.4.23 to 2026.4.24-beta.6 (2026.4.24 is outside it) - CVE-2026-53855: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-53854: 0.0.1 to 2026.4.25-beta.11 (2026.4.25 is outside it) - CVE-2026-53853: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53852: 0.0.1 to 2026.4.25-beta.11 (2026.4.25 is outside it) - CVE-2026-53851: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53850: 0.0.1 to 2026.4.25-beta.11 (2026.4.25 is outside it) - CVE-2026-53849: 0.0.1 to 2026.5.7-beta.1 (2026.5.7 is outside it) - CVE-2026-53848: 0.0.1 to 2026.5.26-beta.2 (2026.5.26 is outside it) - CVE-2026-53847: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53846: 0.0.1 to 2026.4.29-beta.4 (2026.4.29 is outside it) - CVE-2026-53845: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53844: 0.0.1 to 2026.4.29-beta.4 (2026.4.29 is outside it) - CVE-2026-53843: 0.0.1 to 2026.5.26-beta.2 (2026.5.26 is outside it) - CVE-2026-53842: 0.0.1 to 2026.5.2-beta.2 (2026.5.2 is outside it) - CVE-2026-53841: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53840: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53839: 0.0.1 to 2026.5.7-beta.1 (2026.5.7 is outside it) - CVE-2026-53838: 0.0.1 to 2026.5.27-beta.1 (2026.5.27 is outside it) - CVE-2026-53837: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53836: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53835: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53834: 0.0.1 to 2026.4.27-beta.1 (2026.4.27 is outside it) - CVE-2026-53833: 0.0.1 to 2026.4.29-beta.4 (2026.4.29 is outside it) - CVE-2026-53832: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53831: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53830: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-53829: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53828: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53827: 0.0.1 to 2026.5.2-beta.2 (2026.5.2 is outside it) - CVE-2026-53826: 0.0.1 to 2026.4.26-beta.1 (2026.4.26 is outside it) - CVE-2026-53825: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53824: 0.0.1 to 2026.4.24-beta.6 (2026.4.24 is outside it) - CVE-2026-53823: 0.0.1 to 2026.5.3-beta.4 (2026.5.3 is outside it) - CVE-2026-53822: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53821: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53820: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-53819: 0.0.1 to 2026.5.27-beta.1 (2026.5.27 is outside it) - CVE-2026-53818: 0.0.1 to 2026.4.24-beta.6 (2026.4.24 is outside it) - CVE-2026-53817: 0.0.1 to 2026.5.22-beta.1 (2026.5.22 is outside it) - CVE-2026-53816: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53815: 0.0.1 to 2026.5.19-beta.2 (2026.5.19 is outside it) - CVE-2026-53814: 0.0.1 to 2026.5.20-beta.2 (2026.5.20 is outside it) - CVE-2026-53813: 0.0.1 to 2026.4.25-beta.11 (2026.4.25 is outside it) - CVE-2026-53812: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53811: 0.0.1 to 2026.5.7-beta.1 (2026.5.7 is outside it) - CVE-2026-53810: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-53809: 0.0.1 to 2026.4.25-beta.11 (2026.4.25 is outside it) - CVE-2026-53808: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53807: 0.0.1 to 2026.5.6-beta.1 (2026.5.6 is outside it) - CVE-2026-53806: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-35674: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-35673: 0.0.1 to 2026.4.29-beta.4 (2026.4.29 is outside it) - CVE-2026-35630: 0.0.1 to 2026.5.18-beta.1 (2026.5.18 is outside it) - CVE-2026-34507: 0.0.1 to 2026.4.29-beta.4 (2026.4.29 is outside it) - CVE-2026-32906: 0.0.1 to 2026.5.12-beta.8 (2026.5.12 is outside it) - CVE-2026-32905: 0.0.1 to 2026.5.4-beta.3 (2026.5.4 is outside it) - CVE-2026-45006: 0.0.1 to 2026.4.23-beta.6 (2026.4.23 is outside it) - CVE-2026-45005: 0.0.1 to 2026.4.23-beta.6 (2026.4.23 is outside it) - CVE-2026-45004: 0.0.1 to 2026.4.23-beta.6 (2026.4.23 is outside it) - CVE-2026-45003: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-45002: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-45001: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-45000: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44999: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44998: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44997: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-44996: 0.0.1 to 2026.4.15-beta.2 (2026.4.15 is outside it) - CVE-2026-44995: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44994: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-44993: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44992: 2026.4.5 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44991: 0.0.1 to 2026.4.20 (2026.4.21 is outside it) - CVE-2026-44118: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-44117: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44116: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-44115: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-44114: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-44113: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-44112: 0.0.1 to 2026.4.22-beta.1 (2026.4.22 is outside it) - CVE-2026-44111: 0.0.1 to 2026.4.15-beta.2 (2026.4.15 is outside it) - CVE-2026-44109: 0.0.1 to 2026.4.15-beta.2 (2026.4.15 is outside it) - CVE-2026-43585: 0.0.1 to 2026.4.15-beta.2 (2026.4.15 is outside it) - CVE-2026-43584: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43583: 2026.4.10 to 2026.4.14-beta.1 (2026.4.14 is outside it) - CVE-2026-43582: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43581: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43580: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43579: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43578: 2026.3.31 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43577: 0.0.1 to 2026.4.9-beta.1 (2026.4.9 is outside it) - CVE-2026-43576: 0.0.1 to 2026.4.2 (2026.4.5 is outside it) - CVE-2026-43575: 2026.2.21 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43574: 0.0.1 to 2026.4.12-beta.1 (2026.4.12 is outside it) - CVE-2026-43573: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43572: 2026.4.10 to 2026.4.14-beta.1 (2026.4.14 is outside it) - CVE-2026-43571: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43570: 2026.3.22 to 2026.4.2 (2026.4.5 is outside it) - CVE-2026-43569: 0.0.1 to 2026.4.9-beta.1 (2026.4.9 is outside it) - CVE-2026-43568: 2026.4.5 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43567: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43566: 2026.4.7 to 2026.4.14-beta.1 (2026.4.14 is outside it) - CVE-2026-43535: 0.0.1 to 2026.4.14-beta.1 (2026.4.14 is outside it) - CVE-2026-43534: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43533: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43532: 2026.4.7 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43531: 0.0.1 to 2026.4.9-beta.1 (2026.4.9 is outside it) - CVE-2026-43530: 2026.2.23 to 2026.4.12-beta.1 (2026.4.12 is outside it) - CVE-2026-43529: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-43528: 0.0.1 to 2026.4.14-beta.1 (2026.4.14 is outside it) - CVE-2026-43527: 0.0.1 to 2026.4.14-beta.1 (2026.4.14 is outside it) - CVE-2026-43526: 0.0.1 to 2026.4.12-beta.1 (2026.4.12 is outside it) - CVE-2026-42439: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-42438: 2026.4.9 (2026.4.10 is outside it) - CVE-2026-42437: 2026.4.9 (2026.4.10 is outside it) - CVE-2026-42436: 0.0.1 to 2026.4.14-beta.1 (2026.4.14 is outside it) - CVE-2026-42435: 2026.2.22 to 2026.4.12-beta.1 (2026.4.12 is outside it) - CVE-2026-42434: 2026.4.5 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-42433: 0.0.1 to 2026.4.9 (2026.4.10 is outside it) - CVE-2026-42432: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42431: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42430: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42429: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42428: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42427: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42426: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42424: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42423: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42422: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42421: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-42420: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-41916: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-41915: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-41914: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-41913: 0.0.1 to 2026.4.2 (2026.4.5 is outside it) - CVE-2026-41912: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-41911: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-41910: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-41408: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41407: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41406: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41405: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41404: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41403: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41402: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41400: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41399: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41398: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41397: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41396: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41395: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41394: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41393: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41392: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41391: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41390: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41388: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41387: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-41386: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-41385: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41384: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-41383: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41382: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41381: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41380: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41379: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41378: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41377: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41376: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41375: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41374: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41373: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41372: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41371: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41370: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41369: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41368: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41367: 2026.2.14 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41366: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41365: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41364: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41363: 2026.2.6 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41362: 2026.2.19 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41361: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41360: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41359: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41358: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41357: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41356: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41355: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41354: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41353: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-41352: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41351: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41350: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41349: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41348: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41347: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41346: 2026.2.26 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41345: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41344: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41343: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41342: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41341: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41340: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41339: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41338: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41337: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41336: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41335: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41334: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41333: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41332: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41909: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-41908: 0.0.1 to 2026.4.20-beta.2 (2026.4.20 is outside it) - CVE-2026-41331: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41330: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41329: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41303: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41302: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41301: 2026.3.22 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41300: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41299: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-41298: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41297: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41296: 0.0.1 to 2026.3.31-beta.1 (2026.3.31 is outside it) - CVE-2026-41295: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41294: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-40045: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-41389: 2026.4.7 to 2026.4.15-beta.2 (2026.4.15 is outside it) - CVE-2026-35670: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35669: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35668: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35667: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35666: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35665: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35664: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35663: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35662: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35661: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35660: 0.0.1 to 2026.3.23-beta.1 (2026.3.23 is outside it) - CVE-2026-35659: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35658: 0.0.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-35657: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35656: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35655: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35654: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35653: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35652: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35651: 2026.2.13 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35650: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35649: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35648: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35647: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35643: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35641: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35621: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35620: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35619: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-35646: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35645: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35644: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35642: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35640: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35639: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35638: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35637: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35636: 2026.3.11 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35635: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35634: 0.0.1 to 2026.3.23-beta.1 (2026.3.23 is outside it) - CVE-2026-35633: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35632: 0.0.1 to 2026.2.22 (2026.2.23-beta.1 is outside it) - CVE-2026-35631: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35629: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-35628: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35627: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35626: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35625: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35624: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35623: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-35622: 0.0.1 to 2026.3.22-beta.1 (2026.3.22 is outside it) - CVE-2026-35618: 0.0.1 to 2026.3.23-beta.1 (2026.3.23 is outside it) - CVE-2026-35617: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-34512: 0.0.1 to 2026.3.24 (2026.3.28-beta.1 is outside it) - CVE-2026-40037: 0.0.1 to 2026.4.7 (2026.4.8 is outside it) - CVE-2026-34511: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-34426: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-34425: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-34510: 0.0.1 to 2026.4.1 (2026.4.2 is outside it) - CVE-2026-34504: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-34503: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-33581: 0.0.1 to 2026.3.24-beta.2 (2026.3.24 is outside it) - CVE-2026-33580: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-33579: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-33578: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-33577: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-33576: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-34506: 0.0.1 to 2026.3.8-beta.1 (2026.3.8 is outside it) - CVE-2026-34505: 0.0.1 to 2026.3.11 (2026.3.12 is outside it) - CVE-2026-32988: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32982: 0.0.1 to 2026.3.13-beta.1 (2026.3.13 is outside it) - CVE-2026-32977: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32976: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32971: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32970: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32921: 0.0.1 to 2026.3.8-beta.1 (2026.3.8 is outside it) - CVE-2026-32920: 0.0.1 to 2026.3.11 (2026.3.12 is outside it) - CVE-2026-32917: 0.0.1 to 2026.3.13-beta.1 (2026.3.13 is outside it) - CVE-2026-32916: 2026.3.7 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-33575: 0.0.1 to 2026.3.11 (2026.3.12 is outside it) - CVE-2026-33574: 0.0.1 to 2026.3.8-beta.1 (2026.3.8 is outside it) - CVE-2026-33573: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-33572: 0.0.1 to 2026.2.15 (2026.2.17 is outside it) - CVE-2026-32987: 0.0.1 to 2026.3.13-beta.1 (2026.3.13 is outside it) - CVE-2026-32980: 0.0.1 to 2026.3.13-beta.1 (2026.3.13 is outside it) - CVE-2026-32979: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32978: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32975: 0.0.1 to 2026.3.11 (2026.3.12 is outside it) - CVE-2026-32974: 0.0.1 to 2026.3.11 (2026.3.12 is outside it) - CVE-2026-32973: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32972: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32924: 0.0.1 to 2026.3.11 (2026.3.12 is outside it) - CVE-2026-32923: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32922: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32919: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32918: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32915: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32914: 0.0.1 to 2026.3.11 (2026.3.12 is outside it) - CVE-2026-32846: 0.0.1 to 2026.3.28-beta.1 (2026.3.28 is outside it) - CVE-2026-32913: 0.0.1 to 2026.3.7-beta.1 (2026.3.7 is outside it) - CVE-2026-27646: 0.0.1 to 2026.3.7-beta.1 (2026.3.7 is outside it) - CVE-2026-27183: 0.0.1 to 2026.3.7-beta.1 (2026.3.7 is outside it) - CVE-2026-32899: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32898: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-32897: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32896: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32895: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32067: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32065: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32064: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32058: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32057: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32056: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32055: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32054: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32053: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-32052: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-32051: 0.0.1 to 2026.3.1-beta.1 (2026.3.1 is outside it) - CVE-2026-32050: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32049: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32048: 0.0.1 to 2026.3.1-beta.1 (2026.3.1 is outside it) - CVE-2026-32046: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32045: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32044: 0.0.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-32043: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32042: 2026.2.22 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32041: 0.0.1 to 2026.3.1-beta.1 (2026.3.1 is outside it) - CVE-2026-32040: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-32039: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32038: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-32037: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32036: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32035: 0.0.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-32034: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32033: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-32032: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32031: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32030: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-32029: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32028: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32027: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32026: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-32025: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32024: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32023: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-32022: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32021: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32020: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32019: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32018: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-32017: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-32016: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32015: 2026.1.29-beta.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-32014: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32013: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32011: 0.0.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-32010: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32009: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-32008: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32007: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-32006: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-32005: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-32004: 0.0.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-32003: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32002: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-32001: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32000: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-31999: 2026.2.26 to 2026.3.1-beta.1 (2026.3.1 is outside it) - CVE-2026-31998: 2026.2.22 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-31997: 0.0.1 to 2026.3.1-beta.1 (2026.3.1 is outside it) - CVE-2026-31996: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-31995: 2026.1.29-beta.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-31994: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-31993: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-31992: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-31991: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-31990: 0.0.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-31989: 0.0.1 to 2026.3.1-beta.1 (2026.3.1 is outside it) - CVE-2026-29608: 2026.3.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-29607: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-28461: 0.0.1 to 2026.3.1-beta.1 (2026.3.1 is outside it) - CVE-2026-28460: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-28449: 0.0.1 to 2026.2.25-beta.1 (2026.2.25 is outside it) - CVE-2026-27670: 0.0.1 to 2026.3.2-beta.1 (2026.3.2 is outside it) - CVE-2026-27566: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-27545: 0.0.1 to 2026.2.25 (2026.2.26 is outside it) - CVE-2026-27524: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-27523: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-27522: 0.0.1 to 2026.2.23 (2026.2.24 is outside it) - CVE-2026-32302: 0.0.1 to 2026.3.11-beta.1 (2026.3.11 is outside it) - CVE-2026-32063: 0.0.1 to 2026.2.21-2 (2026.2.21 is outside it) - CVE-2026-32062: 0.0.1 to 2026.2.22-2 (2026.2.22 is outside it) - CVE-2026-32061: 0.0.1 to 2026.2.15 (2026.2.17 is outside it) - CVE-2026-32060: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-32059: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-29613: 0.0.1 to 2026.2.9 (2026.2.12 is outside it) - CVE-2026-29612: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-29611: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-29610: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-29609: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-29606: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28486: 2026.1.29-beta.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28482: 0.0.1 to 2026.2.9 (2026.2.12 is outside it) - CVE-2026-28481: 0.0.1 to 2026.1.30 (2026.2.1 is outside it) - CVE-2026-28480: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28479: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-28478: 0.0.1 to 2026.2.12 (2026.2.13 is outside it) - CVE-2026-28477: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28476: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28475: 0.0.1 to 2026.2.12 (2026.2.13 is outside it) - CVE-2026-28473: 0.0.1 to 2026.2.2-3 (2026.2.2 is outside it) - CVE-2026-28472: 0.0.1 to 2026.2.2-3 (2026.2.2 is outside it) - CVE-2026-28471: 2026.1.29-beta.1 to 2026.2.2-3 (2026.2.2 is outside it) - CVE-2026-28470: 0.0.1 to 2026.2.2-3 (2026.2.2 is outside it) - CVE-2026-28469: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28468: 2026.1.29-beta.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28467: 0.0.1 to 2026.2.2-3 (2026.2.2 is outside it) - CVE-2026-28466: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28464: 0.0.1 to 2026.2.9 (2026.2.12 is outside it) - CVE-2026-28463: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28462: 0.0.1 to 2026.2.12 (2026.2.13 is outside it) - CVE-2026-28459: 0.0.1 to 2026.2.9 (2026.2.12 is outside it) - CVE-2026-28458: 2026.1.29-beta.1 to 2026.1.30 (2026.2.1 is outside it) - CVE-2026-28457: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28456: 2026.1.29-beta.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28454: 0.0.1 to 2026.1.30 (2026.2.1 is outside it) - CVE-2026-28453: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28452: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28451: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28450: 0.0.1 to 2026.2.9 (2026.2.12 is outside it) - CVE-2026-28448: 2026.1.29 to 2026.1.30 (2026.2.1 is outside it) - CVE-2026-28447: 2026.1.29-beta.1 to 2026.1.30 (2026.2.1 is outside it) - CVE-2026-28446: 0.0.1 to 2026.2.2-3 (2026.2.2 is outside it) - CVE-2026-28395: 2026.1.29-beta.1 to 2026.2.9 (2026.2.12 is outside it) - CVE-2026-28394: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-28393: 2026.1.29-beta.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28392: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-28391: 0.0.1 to 2026.2.2-3 (2026.2.2 is outside it) - CVE-2026-28363: 0.0.1 to 2026.2.23-beta.1 (2026.2.23 is outside it) - CVE-2026-27576: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-27488: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-27487: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-27486: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-27485: 0.0.1 to 2026.2.19-2 (2026.2.19 is outside it) - CVE-2026-27484: 0.0.1 to 2026.2.17 (2026.2.19-1 is outside it) - CVE-2026-27009: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-27008: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-27007: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-27004: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-27003: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-27002: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-27001: 0.0.1 to 2026.2.14 (2026.2.15 is outside it) - CVE-2026-26972: 2026.1.29-beta.1 to 2026.2.12 (2026.2.13 is outside it) - CVE-2026-26329: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-26328: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-26327: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-26326: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) - CVE-2026-26325: 0.0.1 to 2026.2.13 (2026.2.14 is outside it) ## Advisories (500) ### [CVE-2026-62208](https://cve.now/CVE-2026-62208): OpenClaw \< 2026.6.5 Authorization Header Forwarding via SSE - Severity: Medium 6.0 - Published: Jul 17, 2026 - Affected: fixed in 2026.6.5. - Fixed in 2026.6.5 (released Jun 9, 2026, 38 days before disclosure). - The latest release, 2026.11.1, is not affected. - 3.9% of openclaw downloads last week were affected versions (108.9K). ### [CVE-2026-62197](https://cve.now/CVE-2026-62197): OpenClaw \< 2026.6.6 Policy Bypass via CDP Discovery - Severity: Medium 6.3 - Published: Jul 13, 2026 - Affected: fixed in 2026.6.6. - Fixed in 2026.6.6 (released Jun 12, 2026, 31 days before disclosure). - The latest release, 2026.11.1, is not affected. - 4% of openclaw downloads last week were affected versions (110.7K). ### [CVE-2026-53866](https://cve.now/CVE-2026-53866): OpenClaw \< 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing - Severity: High 7.6 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 33 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53865](https://cve.now/CVE-2026-53865): OpenClaw \< 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH - Severity: High 7.2 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.2. - Fixed in 2026.5.2 (released May 3, 2026, 44 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.3% of openclaw downloads last week were affected versions (63.6K). ### [CVE-2026-53864](https://cve.now/CVE-2026-53864): OpenClaw \< 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control Variables - Severity: High 7.6 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.26. - Fixed in 2026.5.26 (released May 27, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.7% of openclaw downloads last week were affected versions (75.2K). ### [CVE-2026-53863](https://cve.now/CVE-2026-53863): OpenClaw \< 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy - Severity: Medium 6.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.4.25. - Fixed in 2026.4.25 (released Apr 27, 2026, 50 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.7K). ### [CVE-2026-53862](https://cve.now/CVE-2026-53862): OpenClaw \< 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening - Severity: Low 2.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 33 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53861](https://cve.now/CVE-2026-53861): OpenClaw \< 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS - Severity: Medium 5.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 41 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53860](https://cve.now/CVE-2026-53860): OpenClaw \< 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles - Severity: Low 2.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.7. - Fixed in 2026.5.7 (released May 7, 2026, 40 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.6K). ### [CVE-2026-53859](https://cve.now/CVE-2026-53859): OpenClaw \< 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency - Severity: Medium 6.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.26. - Fixed in 2026.5.26 (released May 27, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.7% of openclaw downloads last week were affected versions (75.2K). ### [CVE-2026-53858](https://cve.now/CVE-2026-53858): OpenClaw \< 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE\_DIRECTORY Environment Variable - Severity: High 7.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.2. - Fixed in 2026.5.2 (released May 3, 2026, 44 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.3% of openclaw downloads last week were affected versions (63.6K). ### [CVE-2026-53857](https://cve.now/CVE-2026-53857): OpenClaw \< 2026.5.3 - Mutable Display Name Binding in Zalo allowFrom Policy - Severity: High 8.6 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.3. - Fixed in 2026.5.3 (released May 4, 2026, 43 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.3% of openclaw downloads last week were affected versions (64.6K). ### [CVE-2026-53856](https://cve.now/CVE-2026-53856): OpenClaw 2026.4.23 \< 2026.4.24 - Insecure File Permissions in Config Recovery via OpenClaw.json - Severity: Medium 5.7 - Published: Jun 16, 2026 - Affected: from 2026.4.23, fixed in 2026.4.24. - Fixed in 2026.4.24 (released Apr 25, 2026, 52 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (363). ### [CVE-2026-53855](https://cve.now/CVE-2026-53855): OpenClaw \< 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks - Severity: High 7.6 - Published: Jun 16, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 75 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-53854](https://cve.now/CVE-2026-53854): OpenClaw \< 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands - Severity: Medium 6.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.4.25. - Fixed in 2026.4.25 (released Apr 27, 2026, 50 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.7K). ### [CVE-2026-53853](https://cve.now/CVE-2026-53853): OpenClaw \< 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS - Severity: High 7.6 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 33 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53852](https://cve.now/CVE-2026-53852): OpenClaw \< 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairing - Severity: Low 2.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.4.25. - Fixed in 2026.4.25 (released Apr 27, 2026, 50 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.7K). ### [CVE-2026-53851](https://cve.now/CVE-2026-53851): OpenClaw \< 2026.5.12 - Slack Reaction Event Notification Bypass - Severity: Medium 6.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 33 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53850](https://cve.now/CVE-2026-53850): OpenClaw \< 2026.4.25 - Control Scope Enforcement Bypass in Focus Command - Severity: Medium 6.8 - Published: Jun 16, 2026 - Affected: fixed in 2026.4.25. - Fixed in 2026.4.25 (released Apr 27, 2026, 50 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.7K). ### [CVE-2026-53849](https://cve.now/CVE-2026-53849): OpenClaw \< 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom - Severity: High 8.6 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.7. - Fixed in 2026.5.7 (released May 7, 2026, 40 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.6K). ### [CVE-2026-53848](https://cve.now/CVE-2026-53848): OpenClaw \< 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers - Severity: Low 2.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.26. - Fixed in 2026.5.26 (released May 27, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.7% of openclaw downloads last week were affected versions (75.2K). ### [CVE-2026-53847](https://cve.now/CVE-2026-53847): OpenClaw \< 2026.5.6 - Privilege Escalation via Active Memory Write Scope - Severity: Medium 5.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 41 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53846](https://cve.now/CVE-2026-53846): OpenClaw \< 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm\_execpath - Severity: High 7.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.4.29. - Fixed in 2026.4.29 (released Apr 30, 2026, 47 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (62.6K). ### [CVE-2026-53845](https://cve.now/CVE-2026-53845): OpenClaw \< 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping - Severity: Low 2.3 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 41 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53844](https://cve.now/CVE-2026-53844): OpenClaw \< 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search - Severity: Medium 6.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.4.29. - Fixed in 2026.4.29 (released Apr 30, 2026, 47 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (62.6K). ### [CVE-2026-53843](https://cve.now/CVE-2026-53843): OpenClaw \< 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session - Severity: High 8.7 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.26. - Fixed in 2026.5.26 (released May 27, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.7% of openclaw downloads last week were affected versions (75.2K). ### [CVE-2026-53842](https://cve.now/CVE-2026-53842): OpenClaw \< 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK\_PYTHON Environment Variable - Severity: High 7.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.2. - Fixed in 2026.5.2 (released May 3, 2026, 44 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.3% of openclaw downloads last week were affected versions (63.6K). ### [CVE-2026-53841](https://cve.now/CVE-2026-53841): OpenClaw \< 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML - Severity: Low 2.1 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 33 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53840](https://cve.now/CVE-2026-53840): OpenClaw \< 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects - Severity: Medium 6.0 - Published: Jun 16, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 33 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53839](https://cve.now/CVE-2026-53839): OpenClaw \< 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation - Severity: Medium 6.0 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.7. - Fixed in 2026.5.7 (released May 7, 2026, 36 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.6K). ### [CVE-2026-53838](https://cve.now/CVE-2026-53838): OpenClaw \< 2026.5.27 - Node Pairing State Mutation via Reconnection - Severity: Medium 6.0 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.27. - Fixed in 2026.5.27 (released May 28, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.7% of openclaw downloads last week were affected versions (76K). ### [CVE-2026-53837](https://cve.now/CVE-2026-53837): OpenClaw \< 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers - Severity: Medium 6.3 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 37 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53836](https://cve.now/CVE-2026-53836): OpenClaw \< 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases - Severity: High 8.7 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53835](https://cve.now/CVE-2026-53835): OpenClaw \< 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings - Severity: Low 2.3 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 37 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53834](https://cve.now/CVE-2026-53834): OpenClaw \< 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands - Severity: High 8.2 - Published: Jun 12, 2026 - Affected: fixed in 2026.4.27. - Fixed in 2026.4.27 (released Apr 29, 2026, 44 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (62.3K). ### [CVE-2026-53833](https://cve.now/CVE-2026-53833): QQBot for OpenClaw \< 2026.4.29 - Authorization Bypass via QQBot Streaming Command - Severity: High 7.4 - Published: Jun 12, 2026 - Affected: fixed in 2026.4.29. - Fixed in 2026.4.29 (released Apr 30, 2026, 43 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (62.6K). ### [CVE-2026-53832](https://cve.now/CVE-2026-53832): OpenClaw \< 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration - Severity: High 7.4 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53831](https://cve.now/CVE-2026-53831): OpenClaw \< 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist - Severity: High 7.6 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53830](https://cve.now/CVE-2026-53830): OpenClaw \< 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload - Severity: Medium 6.0 - Published: Jun 12, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 50 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-53829](https://cve.now/CVE-2026-53829): OpenClaw \< 2026.5.18 - Command Truncation in Exec Approval Display - Severity: High 8.5 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53828](https://cve.now/CVE-2026-53828): OpenClaw \< 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement - Severity: High 7.7 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 37 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53827](https://cve.now/CVE-2026-53827): OpenClaw \< 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding - Severity: Medium 6.0 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.2. - Fixed in 2026.5.2 (released May 3, 2026, 40 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.3% of openclaw downloads last week were affected versions (63.6K). ### [CVE-2026-53826](https://cve.now/CVE-2026-53826): OpenClaw \< 2026.4.26 - Information Disclosure via Sandboxed Session Spawn - Severity: Low 2.3 - Published: Jun 12, 2026 - Affected: fixed in 2026.4.26. - Fixed in 2026.4.26 (released Apr 28, 2026, 45 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.9K). ### [CVE-2026-53825](https://cve.now/CVE-2026-53825): OpenClaw \< 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope - Severity: High 7.1 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53824](https://cve.now/CVE-2026-53824): Mattermost plugin for OpenClaw \< 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay - Severity: Medium 6.0 - Published: Jun 12, 2026 - Affected: fixed in 2026.4.24. - Fixed in 2026.4.24 (released Apr 25, 2026, 48 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.3K). ### [CVE-2026-53823](https://cve.now/CVE-2026-53823): OpenClaw \< 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom - Severity: High 8.6 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.3. - Fixed in 2026.5.3 (released May 4, 2026, 39 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.3% of openclaw downloads last week were affected versions (64.6K). ### [CVE-2026-53822](https://cve.now/CVE-2026-53822): OpenClaw \< 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution - Severity: High 8.7 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53821](https://cve.now/CVE-2026-53821): OpenClaw \< 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket - Severity: High 8.7 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53820](https://cve.now/CVE-2026-53820): OpenClaw \< 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn - Severity: Medium 6.9 - Published: Jun 12, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-53819](https://cve.now/CVE-2026-53819): OpenClaw \< 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override - Severity: High 8.7 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.27. - Fixed in 2026.5.27 (released May 28, 2026, 14 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.7% of openclaw downloads last week were affected versions (76K). ### [CVE-2026-53818](https://cve.now/CVE-2026-53818): OpenClaw \< 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback - Severity: Medium 6.9 - Published: Jun 11, 2026 - Affected: fixed in 2026.4.24. - Fixed in 2026.4.24 (released Apr 25, 2026, 47 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.3K). ### [CVE-2026-53817](https://cve.now/CVE-2026-53817): OpenClaw \< 2026.5.22 - Control UI Locality Spoofing in Device Pairing - Severity: High 8.7 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.22. - Fixed in 2026.5.22 (released May 24, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (73.7K). ### [CVE-2026-53816](https://cve.now/CVE-2026-53816): OpenClaw \< 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node - Severity: High 8.6 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53815](https://cve.now/CVE-2026-53815): OpenClaw \< 2026.5.19 - Channel Allowlist Bypass in Message Read Actions - Severity: High 7.1 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.19. - Fixed in 2026.5.19 (released May 20, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.9K). ### [CVE-2026-53814](https://cve.now/CVE-2026-53814): OpenClaw \< 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority - Severity: High 8.7 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.20. - Fixed in 2026.5.20 (released May 21, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (73.2K). ### [CVE-2026-53813](https://cve.now/CVE-2026-53813): OpenClaw \< 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution - Severity: High 7.3 - Published: Jun 11, 2026 - Affected: fixed in 2026.4.25. - Fixed in 2026.4.25 (released Apr 27, 2026, 45 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.7K). ### [CVE-2026-53812](https://cve.now/CVE-2026-53812): OpenClaw \< 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions - Severity: Medium 4.9 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53811](https://cve.now/CVE-2026-53811): OpenClaw \< 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom - Severity: High 7.7 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.7. - Fixed in 2026.5.7 (released May 7, 2026, 35 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.6K). ### [CVE-2026-53810](https://cve.now/CVE-2026-53810): OpenClaw \< 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata - Severity: High 7.7 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-53809](https://cve.now/CVE-2026-53809): OpenClaw \< 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy - Severity: Medium 4.8 - Published: Jun 11, 2026 - Affected: fixed in 2026.4.25. - Fixed in 2026.4.25 (released Apr 27, 2026, 45 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (60.7K). ### [CVE-2026-53808](https://cve.now/CVE-2026-53808): OpenClaw \< 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow - Severity: Medium 6.0 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 36 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53807](https://cve.now/CVE-2026-53807): OpenClaw \< 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom - Severity: High 7.7 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.6. - Fixed in 2026.5.6 (released May 6, 2026, 36 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (67.3K). ### [CVE-2026-53806](https://cve.now/CVE-2026-53806): OpenClaw \< 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation - Severity: High 7.7 - Published: Jun 11, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-35674](https://cve.now/CVE-2026-35674): OpenClaw \< 2026.5.18 - Scope Bypass via Inherited chat.send Route - Severity: High 8.8 - Published: May 29, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-35673](https://cve.now/CVE-2026-35673): OpenClaw \< 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routes - Severity: Medium 6.5 - Published: May 29, 2026 - Affected: fixed in 2026.4.29. - Fixed in 2026.4.29 (released Apr 30, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (62.6K). ### [CVE-2026-35630](https://cve.now/CVE-2026-35630): OpenClaw \< 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttons - Severity: High 8.0 - Published: May 29, 2026 - Affected: fixed in 2026.5.18. - Fixed in 2026.5.18 (released May 18, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.6% of openclaw downloads last week were affected versions (72.5K). ### [CVE-2026-34507](https://cve.now/CVE-2026-34507): OpenClaw \< 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checks - Severity: Low 2.3 - Published: May 29, 2026 - Affected: fixed in 2026.4.29. - Fixed in 2026.4.29 (released Apr 30, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.2% of openclaw downloads last week were affected versions (62.6K). ### [CVE-2026-32906](https://cve.now/CVE-2026-32906): OpenClaw \< 2026.5.12 - Privilege Escalation in Slack Plugin Approvals via Exec Approver Gate - Severity: Low 2.3 - Published: May 29, 2026 - Affected: fixed in 2026.5.12. - Fixed in 2026.5.12 (released May 14, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.5% of openclaw downloads last week were affected versions (70.1K). ### [CVE-2026-32905](https://cve.now/CVE-2026-32905): OpenClaw \< 2026.5.4 - Unauthorized Device-Pairing Bootstrap Code Issuance via Chat Command - Severity: High 8.3 - Published: May 29, 2026 - Affected: fixed in 2026.5.4. - Fixed in 2026.5.4 (released May 5, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.4% of openclaw downloads last week were affected versions (66.9K). ### [CVE-2026-45006](https://cve.now/CVE-2026-45006): OpenClaw \< 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypass - Severity: High 7.7 - Published: May 11, 2026 - Affected: fixed in 2026.4.23. - Fixed in 2026.4.23 (released Apr 24, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (60K). ### [CVE-2026-45005](https://cve.now/CVE-2026-45005): OpenClaw \< 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotation - Severity: Medium 5.9 - Published: May 11, 2026 - Affected: fixed in 2026.4.23. - Fixed in 2026.4.23 (released Apr 24, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (60K). ### [CVE-2026-45004](https://cve.now/CVE-2026-45004): OpenClaw \< 2026.4.23 - Arbitrary Code Execution via setup-api.js in Current Working Directory - Severity: High 8.4 - Published: May 11, 2026 - Affected: fixed in 2026.4.23. - Fixed in 2026.4.23 (released Apr 24, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (60K). ### [CVE-2026-45003](https://cve.now/CVE-2026-45003): OpenClaw \< 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files - Severity: Medium 4.1 - Published: May 11, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-45002](https://cve.now/CVE-2026-45002): OpenClaw \< 2026.4.20 - Hook Session-Key Bypass via Template Mapping - Severity: Medium 6.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-45001](https://cve.now/CVE-2026-45001): OpenClaw \< 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access - Severity: Medium 6.0 - Published: May 11, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-45000](https://cve.now/CVE-2026-45000): OpenClaw \< 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation - Severity: Low 2.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-44999](https://cve.now/CVE-2026-44999): OpenClaw \< 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events - Severity: Medium 6.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-44998](https://cve.now/CVE-2026-44998): OpenClaw \< 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools - Severity: Low 2.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-44997](https://cve.now/CVE-2026-44997): OpenClaw \< 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions - Severity: Low 2.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-44996](https://cve.now/CVE-2026-44996): OpenClaw \< 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embedding - Severity: Medium 6.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.15. - Fixed in 2026.4.15 (released Apr 16, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (51.4K). ### [CVE-2026-44995](https://cve.now/CVE-2026-44995): OpenClaw \< 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables - Severity: Medium 5.4 - Published: May 11, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-44994](https://cve.now/CVE-2026-44994): OpenClaw \< 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpoint - Severity: Medium 6.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-44993](https://cve.now/CVE-2026-44993): OpenClaw \< 2026.4.20 - Direct Message Misclassification in Feishu Card Actions - Severity: Low 2.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-44992](https://cve.now/CVE-2026-44992): OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv - Severity: Medium 4.1 - Published: May 11, 2026 - Affected: from 2026.4.5, fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.5% of openclaw downloads last week were affected versions (14K). ### [CVE-2026-44991](https://cve.now/CVE-2026-44991): OpenClaw \< 2026.4.21 - Authorization Bypass in Owner-Enforced Commands via Wildcard Channel Senders - Severity: Low 2.3 - Published: May 11, 2026 - Affected: fixed in 2026.4.21. - Fixed in 2026.4.21 (released Apr 22, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.6K). ### [CVE-2026-44118](https://cve.now/CVE-2026-44118): OpenClaw \< 2026.4.22 - Owner Context Spoofing via Bearer Token Header - Severity: High 8.5 - Published: May 6, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 13 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-44117](https://cve.now/CVE-2026-44117): OpenClaw \< 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload - Severity: Medium 6.3 - Published: May 6, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-44116](https://cve.now/CVE-2026-44116): OpenClaw \< 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation - Severity: Medium 6.9 - Published: May 6, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 13 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-44115](https://cve.now/CVE-2026-44115): OpenClaw \< 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist - Severity: High 8.7 - Published: May 6, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 13 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-44114](https://cve.now/CVE-2026-44114): OpenClaw \< 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv - Severity: High 8.5 - Published: May 6, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-44113](https://cve.now/CVE-2026-44113): OpenClaw \< 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge - Severity: High 8.3 - Published: May 6, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 13 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-44112](https://cve.now/CVE-2026-44112): OpenClaw \< 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes - Severity: High 8.4 - Published: May 6, 2026 - Affected: fixed in 2026.4.22. - Fixed in 2026.4.22 (released Apr 23, 2026, 13 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.9K). ### [CVE-2026-44111](https://cve.now/CVE-2026-44111): OpenClaw \< 2026.4.15 - Arbitrary Markdown File Read via QMD memory\_get - Severity: Low 2.3 - Published: May 6, 2026 - Affected: fixed in 2026.4.15. - Fixed in 2026.4.15 (released Apr 16, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (51.4K). ### [CVE-2026-44109](https://cve.now/CVE-2026-44109): OpenClaw \< 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action Validation - Severity: Critical 9.2 - Published: May 6, 2026 - Affected: fixed in 2026.4.15. - Fixed in 2026.4.15 (released Apr 16, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (51.4K). ### [CVE-2026-43585](https://cve.now/CVE-2026-43585): OpenClaw \< 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution - Severity: Critical 9.2 - Published: May 6, 2026 - Affected: fixed in 2026.4.15. - Fixed in 2026.4.15 (released Apr 16, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (51.4K). ### [CVE-2026-43584](https://cve.now/CVE-2026-43584): OpenClaw \< 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy - Severity: High 8.7 - Published: May 6, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43583](https://cve.now/CVE-2026-43583): OpenClaw 2026.4.10 \< 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recovery - Severity: Medium 6.0 - Published: May 6, 2026 - Affected: from 2026.4.10, fixed in 2026.4.14. - Fixed in 2026.4.14 (released Apr 14, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (734). ### [CVE-2026-43582](https://cve.now/CVE-2026-43582): OpenClaw \< 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass - Severity: Medium 4.9 - Published: May 6, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43581](https://cve.now/CVE-2026-43581): OpenClaw \< 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding - Severity: Critical 9.0 - Published: May 6, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43580](https://cve.now/CVE-2026-43580): OpenClaw \< 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions - Severity: Medium 4.9 - Published: May 6, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43579](https://cve.now/CVE-2026-43579): OpenClaw \< 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes - Severity: Medium 6.0 - Published: May 6, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43578](https://cve.now/CVE-2026-43578): OpenClaw 2026.3.31 \< 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade - Severity: Critical 9.1 - Published: May 6, 2026 - Affected: from 2026.3.31, fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.3% of openclaw downloads last week were affected versions (8.4K). ### [CVE-2026-43577](https://cve.now/CVE-2026-43577): OpenClaw \< 2026.4.9 - Arbitrary File Read via Browser Interaction Routes - Severity: High 7.1 - Published: May 6, 2026 - Affected: fixed in 2026.4.9. - Fixed in 2026.4.9 (released Apr 9, 2026, 27 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (45.1K). ### [CVE-2026-43576](https://cve.now/CVE-2026-43576): OpenClaw \< 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL - Severity: Medium 4.9 - Published: May 6, 2026 - Affected: fixed in 2026.4.5. - Fixed in 2026.4.5 (released Apr 6, 2026, 30 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.4K). ### [CVE-2026-43575](https://cve.now/CVE-2026-43575): OpenClaw 2026.2.21 \< 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Route - Severity: Critical 9.2 - Published: May 6, 2026 - Affected: from 2026.2.21, fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.8K). ### [CVE-2026-43574](https://cve.now/CVE-2026-43574): OpenClaw \< 2026.4.12 - Improper Authorization via Empty Approver Lists - Severity: Medium 6.0 - Published: May 5, 2026 - Affected: fixed in 2026.4.12. - Fixed in 2026.4.12 (released Apr 13, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (49.3K). ### [CVE-2026-43573](https://cve.now/CVE-2026-43573): OpenClaw \< 2026.4.10 - SSRF Policy Bypass in Existing-Session Browser Interaction Routes - Severity: Medium 4.9 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43572](https://cve.now/CVE-2026-43572): OpenClaw 2026.4.10 \< 2026.4.14 - Missing Sender Authorization in Microsoft Teams SSO Invoke Handler - Severity: Medium 6.3 - Published: May 5, 2026 - Affected: from 2026.4.10, fixed in 2026.4.14. - Fixed in 2026.4.14 (released Apr 14, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (734). ### [CVE-2026-43571](https://cve.now/CVE-2026-43571): OpenClaw \< 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup - Severity: High 7.7 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43570](https://cve.now/CVE-2026-43570): OpenClaw 2026.3.22 \< 2026.4.5 - Symlink Traversal in Remote Marketplace Repository Path Handling - Severity: Medium 6.0 - Published: May 5, 2026 - Affected: from 2026.3.22, fixed in 2026.4.5. - Fixed in 2026.4.5 (released Apr 6, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.4% of openclaw downloads last week were affected versions (11.8K). ### [CVE-2026-43569](https://cve.now/CVE-2026-43569): OpenClaw \< 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth - Severity: High 7.7 - Published: May 5, 2026 - Affected: fixed in 2026.4.9. - Fixed in 2026.4.9 (released Apr 9, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (45.1K). ### [CVE-2026-43568](https://cve.now/CVE-2026-43568): OpenClaw 2026.4.5 through 2026.4.9 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpoint - Severity: High 7.1 - Published: May 5, 2026 - Affected: from 2026.4.5, fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.2% of openclaw downloads last week were affected versions (4.3K). ### [CVE-2026-43567](https://cve.now/CVE-2026-43567): OpenClaw \< 2026.4.10 - Path Traversal in screen\_record outPath Parameter - Severity: High 7.1 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43566](https://cve.now/CVE-2026-43566): OpenClaw 2026.4.7 \< 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events - Severity: Critical 9.1 - Published: May 5, 2026 - Affected: from 2026.4.7, fixed in 2026.4.14. - Fixed in 2026.4.14 (released Apr 14, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.2% of openclaw downloads last week were affected versions (4.8K). ### [CVE-2026-43535](https://cve.now/CVE-2026-43535): OpenClaw \< 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches - Severity: High 7.6 - Published: May 5, 2026 - Affected: fixed in 2026.4.14. - Fixed in 2026.4.14 (released Apr 14, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (49.5K). ### [CVE-2026-43534](https://cve.now/CVE-2026-43534): OpenClaw \< 2026.4.10 - Unsanitized External Input in Agent Hook Events - Severity: Critical 9.3 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43533](https://cve.now/CVE-2026-43533): OpenClaw \< 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags - Severity: High 8.9 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43532](https://cve.now/CVE-2026-43532): OpenClaw 2026.4.7 \< 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image - Severity: Medium 4.9 - Published: May 5, 2026 - Affected: from 2026.4.7, fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.1% of openclaw downloads last week were affected versions (4K). ### [CVE-2026-43531](https://cve.now/CVE-2026-43531): OpenClaw \< 2026.4.9 - Environment Variable Injection via Workspace .env File - Severity: High 7.0 - Published: May 5, 2026 - Affected: fixed in 2026.4.9. - Fixed in 2026.4.9 (released Apr 9, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (45.1K). ### [CVE-2026-43530](https://cve.now/CVE-2026-43530): OpenClaw 2026.2.23 \< 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Execution - Severity: High 8.7 - Published: May 5, 2026 - Affected: from 2026.2.23, fixed in 2026.4.12. - Fixed in 2026.4.12 (released Apr 13, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.8K). ### [CVE-2026-43529](https://cve.now/CVE-2026-43529): OpenClaw \< 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator - Severity: Low 2.0 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-43528](https://cve.now/CVE-2026-43528): OpenClaw \< 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliases - Severity: High 7.1 - Published: May 5, 2026 - Affected: fixed in 2026.4.14. - Fixed in 2026.4.14 (released Apr 14, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (49.5K). ### [CVE-2026-43527](https://cve.now/CVE-2026-43527): OpenClaw \< 2026.4.14 - Server-Side Request Forgery via Private Network Navigation - Severity: Medium 6.3 - Published: May 5, 2026 - Affected: fixed in 2026.4.14. - Fixed in 2026.4.14 (released Apr 14, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (49.5K). ### [CVE-2026-43526](https://cve.now/CVE-2026-43526): OpenClaw \< 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling - Severity: High 8.3 - Published: May 5, 2026 - Affected: fixed in 2026.4.12. - Fixed in 2026.4.12 (released Apr 13, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (49.3K). ### [CVE-2026-42439](https://cve.now/CVE-2026-42439): OpenClaw \< 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routes - Severity: Medium 4.9 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-42438](https://cve.now/CVE-2026-42438): OpenClaw 2026.4.9 \< 2026.4.10 - Sender Policy Bypass in Host Media Attachment Reads - Severity: Medium 4.9 - Published: May 5, 2026 - Affected: from 2026.4.9, fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.1% of openclaw downloads last week were affected versions (3.7K). ### [CVE-2026-42437](https://cve.now/CVE-2026-42437): OpenClaw 2026.4.9 \< 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Path - Severity: High 8.2 - Published: May 5, 2026 - Affected: from 2026.4.9, fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.1% of openclaw downloads last week were affected versions (3.7K). ### [CVE-2026-42436](https://cve.now/CVE-2026-42436): OpenClaw \< 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes - Severity: Medium 4.9 - Published: May 5, 2026 - Affected: fixed in 2026.4.14. - Fixed in 2026.4.14 (released Apr 14, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.8% of openclaw downloads last week were affected versions (49.5K). ### [CVE-2026-42435](https://cve.now/CVE-2026-42435): OpenClaw 2026.2.22 \< 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection - Severity: High 8.7 - Published: May 5, 2026 - Affected: from 2026.2.22, fixed in 2026.4.12. - Fixed in 2026.4.12 (released Apr 13, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30K). ### [CVE-2026-42434](https://cve.now/CVE-2026-42434): OpenClaw 2026.4.5 \< 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing - Severity: High 8.7 - Published: May 5, 2026 - Affected: from 2026.4.5, fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.2% of openclaw downloads last week were affected versions (4.3K). ### [CVE-2026-42433](https://cve.now/CVE-2026-42433): OpenClaw \< 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools - Severity: High 7.1 - Published: May 5, 2026 - Affected: fixed in 2026.4.10. - Fixed in 2026.4.10 (released Apr 11, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.7% of openclaw downloads last week were affected versions (48.8K). ### [CVE-2026-42432](https://cve.now/CVE-2026-42432): OpenClaw \< 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypass - Severity: High 7.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42431](https://cve.now/CVE-2026-42431): OpenClaw \< 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypass - Severity: High 7.6 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42430](https://cve.now/CVE-2026-42430): OpenClaw \< 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling - Severity: Medium 4.8 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42429](https://cve.now/CVE-2026-42429): OpenClaw \< 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication - Severity: Medium 6.0 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42428](https://cve.now/CVE-2026-42428): OpenClaw \< 2026.4.8 - Missing Integrity Verification in Package Downloads - Severity: High 7.5 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42427](https://cve.now/CVE-2026-42427): OpenClaw \< 2026.4.8 - Remote Code Execution via Build Tool Environment Variable Injection - Severity: Medium 5.8 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42426](https://cve.now/CVE-2026-42426): OpenClaw \< 2026.4.8 - Improper Authorization in node.pair.approve via operator.write Scope - Severity: High 8.7 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42424](https://cve.now/CVE-2026-42424): OpenClaw \< 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA Paths - Severity: Medium 5.9 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42423](https://cve.now/CVE-2026-42423): OpenClaw \< 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout Fallback - Severity: High 7.7 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42422](https://cve.now/CVE-2026-42422): OpenClaw \< 2026.4.8 - Role Bypass in device.token.rotate Function - Severity: High 7.7 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42421](https://cve.now/CVE-2026-42421): OpenClaw \< 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token Rotation - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-42420](https://cve.now/CVE-2026-42420): OpenClaw \< 2026.4.8 - Improper Base64 Decoding Size Validation - Severity: Medium 5.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-41916](https://cve.now/CVE-2026-41916): OpenClaw \< 2026.4.8 - Stale Authentication State via Config Reload - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-41915](https://cve.now/CVE-2026-41915): OpenClaw \< 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec Environment - Severity: Medium 5.8 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-41914](https://cve.now/CVE-2026-41914): OpenClaw \< 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch Paths - Severity: Medium 5.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-41913](https://cve.now/CVE-2026-41913): OpenClaw \< 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication Attempts - Severity: Medium 6.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.4. - Fixed in 2026.4.5 (released Apr 6, 2026, 22 days before disclosure, the advisory names 2026.4.4, which was never published). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.4K). ### [CVE-2026-41912](https://cve.now/CVE-2026-41912): OpenClaw \< 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigation - Severity: Medium 4.8 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-41911](https://cve.now/CVE-2026-41911): OpenClaw \< 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload\_file/upload\_image - Severity: Medium 6.0 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-41910](https://cve.now/CVE-2026-41910): OpenClaw \< 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel Writes - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-41408](https://cve.now/CVE-2026-41408): OpenClaw \< 2026.3.31 - Disk Exhaustion via Media Download Bypass - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41407](https://cve.now/CVE-2026-41407): OpenClaw \< 2026.4.2 - Timing Side Channel in Shared-Secret Comparison - Severity: Medium 6.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41406](https://cve.now/CVE-2026-41406): OpenClaw \< 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted Messages - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41405](https://cve.now/CVE-2026-41405): OpenClaw \< 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing - Severity: High 8.7 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41404](https://cve.now/CVE-2026-41404): OpenClaw \< 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy Authentication - Severity: High 7.7 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41403](https://cve.now/CVE-2026-41403): OpenClaw \< 2026.3.31 - Access Control Bypass via Proxied Remote Request Misclassification - Severity: Medium 6.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41402](https://cve.now/CVE-2026-41402): OpenClaw \< 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypass - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41400](https://cve.now/CVE-2026-41400): OpenClaw \< 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-call - Severity: Medium 6.9 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41399](https://cve.now/CVE-2026-41399): OpenClaw \< 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket Upgrades - Severity: High 8.7 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 30 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41398](https://cve.now/CVE-2026-41398): OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridge - Severity: Low 2.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41397](https://cve.now/CVE-2026-41397): OpenClaw \< 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal - Severity: High 7.6 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41396](https://cve.now/CVE-2026-41396): OpenClaw \< 2026.3.31 - Environment Variable Override of Plugin Trust Root - Severity: High 8.5 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41395](https://cve.now/CVE-2026-41395): OpenClaw \< 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3 - Severity: High 8.2 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 30 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41394](https://cve.now/CVE-2026-41394): OpenClaw \< 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth Routes - Severity: High 8.8 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41393](https://cve.now/CVE-2026-41393): OpenClaw \< 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area Discovery - Severity: Medium 5.9 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41392](https://cve.now/CVE-2026-41392): OpenClaw \< 2026.3.31 - Exec Allowlist Bypass via Shell Init-File Options - Severity: Medium 5.4 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41391](https://cve.now/CVE-2026-41391): OpenClaw \< 2026.3.31 - Environment Variable Bypass in Package Index URL Handling - Severity: Medium 5.8 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41390](https://cve.now/CVE-2026-41390): OpenClaw \< 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrapper - Severity: High 7.0 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 30 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41388](https://cve.now/CVE-2026-41388): OpenClaw \< 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling - Severity: Medium 6.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41387](https://cve.now/CVE-2026-41387): OpenClaw \< 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization - Severity: High 8.5 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 36 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-41386](https://cve.now/CVE-2026-41386): OpenClaw \< 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes - Severity: Critical 9.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 36 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-41385](https://cve.now/CVE-2026-41385): OpenClaw \< 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass - Severity: High 7.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41384](https://cve.now/CVE-2026-41384): OpenClaw \< 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend - Severity: High 8.5 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 34 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-41383](https://cve.now/CVE-2026-41383): OpenClaw \< 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Paths - Severity: Medium 6.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41382](https://cve.now/CVE-2026-41382): OpenClaw \< 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gaps - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41381](https://cve.now/CVE-2026-41381): OpenClaw \< 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41380](https://cve.now/CVE-2026-41380): OpenClaw \< 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables - Severity: High 7.0 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 30 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41379](https://cve.now/CVE-2026-41379): OpenClaw \< 2026.3.28 - Privilege Escalation via chat.send to Admin-Class Talk Voice Config - Severity: High 7.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 30 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41378](https://cve.now/CVE-2026-41378): OpenClaw \< 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatch - Severity: High 7.7 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41377](https://cve.now/CVE-2026-41377): OpenClaw \< 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation - Severity: Medium 5.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41376](https://cve.now/CVE-2026-41376): OpenClaw \< 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation - Severity: Low 2.3 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41375](https://cve.now/CVE-2026-41375): OpenClaw \< 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm Endpoints - Severity: High 7.1 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 30 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41374](https://cve.now/CVE-2026-41374): OpenClaw \< 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization - Severity: Medium 6.9 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41373](https://cve.now/CVE-2026-41373): OpenClaw \< 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy - Severity: Medium 5.8 - Published: Apr 28, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41372](https://cve.now/CVE-2026-41372): OpenClaw \< 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP Discovery - Severity: Medium 6.9 - Published: Apr 27, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41371](https://cve.now/CVE-2026-41371): OpenClaw \< 2026.3.28 - Privilege Escalation via chat.send Reset Command - Severity: High 8.4 - Published: Apr 27, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41370](https://cve.now/CVE-2026-41370): OpenClaw \< 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP Dispatch - Severity: High 7.1 - Published: Apr 27, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 27 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41369](https://cve.now/CVE-2026-41369): OpenClaw \< 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution - Severity: High 7.1 - Published: Apr 27, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 27 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41368](https://cve.now/CVE-2026-41368): OpenClaw \< 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypass - Severity: High 7.1 - Published: Apr 27, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41367](https://cve.now/CVE-2026-41367): OpenClaw 2026.2.14 \< 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions - Severity: Medium 5.3 - Published: Apr 27, 2026 - Affected: from 2026.2.14, fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-41366](https://cve.now/CVE-2026-41366): OpenClaw \< 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting - Severity: Medium 6.0 - Published: Apr 27, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 27 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41365](https://cve.now/CVE-2026-41365): OpenClaw \< 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History - Severity: Medium 5.3 - Published: Apr 27, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 27 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41364](https://cve.now/CVE-2026-41364): OpenClaw \< 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload - Severity: High 7.2 - Published: Apr 27, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 27 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41363](https://cve.now/CVE-2026-41363): OpenClaw 2026.2.6 \< 2026.3.28 - Arbitrary File Read via Feishu upload\_image Parameter - Severity: Medium 6.0 - Published: Apr 27, 2026 - Affected: from 2026.2.6, fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.1K). ### [CVE-2026-41362](https://cve.now/CVE-2026-41362): OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication - Severity: Low 2.3 - Published: Apr 27, 2026 - Affected: from 2026.2.19, fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 27 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.8% of openclaw downloads last week were affected versions (21.7K). ### [CVE-2026-41361](https://cve.now/CVE-2026-41361): OpenClaw \< 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges - Severity: Medium 5.1 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41360](https://cve.now/CVE-2026-41360): OpenClaw \< 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script Binding - Severity: Medium 5.4 - Published: Apr 23, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41359](https://cve.now/CVE-2026-41359): OpenClaw \< 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence - Severity: High 7.1 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41358](https://cve.now/CVE-2026-41358): OpenClaw \< 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context - Severity: Low 2.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41357](https://cve.now/CVE-2026-41357): OpenClaw \< 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox Backends - Severity: Low 2.0 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41356](https://cve.now/CVE-2026-41356): OpenClaw \< 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotate - Severity: Low 2.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41355](https://cve.now/CVE-2026-41355): OpenClaw \< 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion - Severity: Medium 5.4 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41354](https://cve.now/CVE-2026-41354): OpenClaw \< 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys - Severity: Medium 6.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41353](https://cve.now/CVE-2026-41353): OpenClaw \< 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection - Severity: High 7.6 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 31 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-41352](https://cve.now/CVE-2026-41352): OpenClaw \< 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass - Severity: High 7.7 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41351](https://cve.now/CVE-2026-41351): OpenClaw \< 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding - Severity: Medium 6.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41350](https://cve.now/CVE-2026-41350): OpenClaw \< 2026.3.31 - Session Visibility Bypass via session\_status in Unsandboxed Invocations - Severity: Medium 5.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41349](https://cve.now/CVE-2026-41349): OpenClaw \< 2026.3.28 - Agentic Consent Bypass via config.patch - Severity: High 8.7 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41348](https://cve.now/CVE-2026-41348): OpenClaw \< 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands - Severity: Low 2.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41347](https://cve.now/CVE-2026-41347): OpenClaw \< 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints - Severity: Low 2.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41346](https://cve.now/CVE-2026-41346): OpenClaw 2026.2.26 \< 2026.3.31 - Denial of Service via Improper Pending Pairing Request Cap Enforcement - Severity: Medium 6.3 - Published: Apr 23, 2026 - Affected: from 2026.2.26, fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.9K). ### [CVE-2026-41345](https://cve.now/CVE-2026-41345): OpenClaw \< 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download - Severity: Medium 6.0 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41344](https://cve.now/CVE-2026-41344): OpenClaw \< 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter - Severity: Medium 5.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41343](https://cve.now/CVE-2026-41343): OpenClaw \< 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency - Severity: Medium 6.9 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41342](https://cve.now/CVE-2026-41342): OpenClaw \< 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding - Severity: High 7.4 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41341](https://cve.now/CVE-2026-41341): OpenClaw \< 2026.3.31 - Component Interaction Misclassification in Discord Extension - Severity: Low 2.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41340](https://cve.now/CVE-2026-41340): OpenClaw \< 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration - Severity: Medium 6.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41339](https://cve.now/CVE-2026-41339): OpenClaw \< 2026.4.2 - Information Disclosure via Gateway Connect Snapshot - Severity: Medium 5.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41338](https://cve.now/CVE-2026-41338): OpenClaw \< 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations - Severity: Medium 4.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41337](https://cve.now/CVE-2026-41337): OpenClaw \< 2026.3.31 - Callback Origin Mutation in Plivo Voice-call Replay - Severity: Medium 6.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41336](https://cve.now/CVE-2026-41336): OpenClaw \< 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW\_BUNDLED\_HOOKS\_DIR Environment Variable Override - Severity: High 8.5 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41335](https://cve.now/CVE-2026-41335): OpenClaw \< 2026.3.31 - Information Disclosure via Control UI Bootstrap JSON - Severity: Medium 6.9 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41334](https://cve.now/CVE-2026-41334): OpenClaw \< 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass - Severity: High 7.1 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41333](https://cve.now/CVE-2026-41333): OpenClaw \< 2026.3.31 - Authentication Rate Limiting Bypass via Fake DeviceToken - Severity: Medium 6.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41332](https://cve.now/CVE-2026-41332): OpenClaw \< 2026.3.28 - Code Execution via Missing Environment Variable Blocklist - Severity: Medium 5.8 - Published: Apr 23, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41909](https://cve.now/CVE-2026-41909): OpenClaw \< 2026.4.20 - Improper Authorization in Paired-Device Pairing Actions - Severity: Medium 5.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-41908](https://cve.now/CVE-2026-41908): OpenClaw \< 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Route - Severity: Low 2.3 - Published: Apr 23, 2026 - Affected: fixed in 2026.4.20. - Fixed in 2026.4.20 (released Apr 21, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 2.1% of openclaw downloads last week were affected versions (58.4K). ### [CVE-2026-41331](https://cve.now/CVE-2026-41331): OpenClaw \< 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription - Severity: Medium 6.9 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41330](https://cve.now/CVE-2026-41330): OpenClaw \< 2026.3.31 - Environment Variable Override via Host Exec Policy - Severity: Low 2.0 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41329](https://cve.now/CVE-2026-41329): OpenClaw \< 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation - Severity: Critical 9.0 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41303](https://cve.now/CVE-2026-41303): OpenClaw \< 2026.3.28 - Authorization Bypass in Discord Text Approval Commands - Severity: High 8.7 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41302](https://cve.now/CVE-2026-41302): OpenClaw \< 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download - Severity: Medium 4.8 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41301](https://cve.now/CVE-2026-41301): OpenClaw 2026.3.22 \< 2026.3.31 - Forged Nostr DM Pairing State Creation via Signature Verification Bypass - Severity: Medium 6.9 - Published: Apr 20, 2026 - Affected: from 2026.3.22, fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.3% of openclaw downloads last week were affected versions (7.7K). ### [CVE-2026-41300](https://cve.now/CVE-2026-41300): OpenClaw \< 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding - Severity: Medium 6.9 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41299](https://cve.now/CVE-2026-41299): OpenClaw \< 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard - Severity: High 7.1 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-41298](https://cve.now/CVE-2026-41298): OpenClaw \< 2026.4.2 - Authorization Bypass in Session Termination Endpoint - Severity: Medium 5.3 - Published: Apr 20, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41297](https://cve.now/CVE-2026-41297): OpenClaw \< 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download Redirect - Severity: Medium 4.8 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41296](https://cve.now/CVE-2026-41296): OpenClaw \< 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFile - Severity: High 8.8 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.31. - Fixed in 2026.3.31 (released Mar 31, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.4% of openclaw downloads last week were affected versions (40.3K). ### [CVE-2026-41295](https://cve.now/CVE-2026-41295): OpenClaw \< 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup - Severity: High 8.5 - Published: Apr 20, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41294](https://cve.now/CVE-2026-41294): OpenClaw \< 2026.3.28 - Environment Variable Injection via CWD .env File - Severity: High 8.5 - Published: Apr 20, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-40045](https://cve.now/CVE-2026-40045): OpenClaw \< 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints - Severity: Medium 5.9 - Published: Apr 20, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-41389](https://cve.now/CVE-2026-41389): OpenClaw 2026.4.7 \< 2026.4.15 - Arbitrary File Read via Unvalidated Tool-Result Media Paths - Severity: Medium 6.3 - Published: Apr 20, 2026 - Affected: from 2026.4.7, fixed in 2026.4.15. - Fixed in 2026.4.15 (released Apr 16, 2026, 4 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.2% of openclaw downloads last week were affected versions (6.6K). ### [CVE-2026-35670](https://cve.now/CVE-2026-35670): OpenClaw \< 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat - Severity: Medium 6.0 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35669](https://cve.now/CVE-2026-35669): OpenClaw \< 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scope - Severity: High 8.7 - Published: Apr 10, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35668](https://cve.now/CVE-2026-35668): OpenClaw \< 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters - Severity: High 7.1 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35667](https://cve.now/CVE-2026-35667): OpenClaw \< 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35666](https://cve.now/CVE-2026-35666): OpenClaw \< 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper - Severity: High 7.7 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35665](https://cve.now/CVE-2026-35665): OpenClaw \< 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35664](https://cve.now/CVE-2026-35664): OpenClaw \< 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35663](https://cve.now/CVE-2026-35663): OpenClaw \< 2026.3.25 - Privilege Escalation via Backend Reconnect Scope Self-Claim - Severity: High 8.7 - Published: Apr 10, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35662](https://cve.now/CVE-2026-35662): OpenClaw \< 2026.3.22 - Missing controlScope Enforcement in Send Action - Severity: Medium 5.3 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35661](https://cve.now/CVE-2026-35661): OpenClaw \< 2026.3.25 - Telegram DM-Scoped Inline Button Callback Authorization Bypass - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35660](https://cve.now/CVE-2026-35660): OpenClaw \< 2026.3.23 - Insufficient Access Control in Gateway Agent Session Reset - Severity: High 7.2 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.23. - Fixed in 2026.3.23 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (34.7K). ### [CVE-2026-35659](https://cve.now/CVE-2026-35659): OpenClaw \< 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discovery - Severity: Medium 5.1 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35658](https://cve.now/CVE-2026-35658): OpenClaw \< 2026.3.2 - Filesystem Boundary Bypass in Image Tool - Severity: Medium 6.0 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 38 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.9K). ### [CVE-2026-35657](https://cve.now/CVE-2026-35657): OpenClaw \< 2026.3.25 - Authorization Bypass in HTTP Session History Route - Severity: High 7.1 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.25. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure, the advisory names 2026.3.25, which was never published). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35656](https://cve.now/CVE-2026-35656): OpenClaw \< 2026.3.22 - XFF Loopback Spoofing Bypass in Canvas Authentication and Rate Limiter - Severity: Medium 6.3 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35655](https://cve.now/CVE-2026-35655): OpenClaw \< 2026.3.22 - Identity Spoofing via rawInput Tool in ACP Permission Resolution - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35654](https://cve.now/CVE-2026-35654): OpenClaw \< 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invoke - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35653](https://cve.now/CVE-2026-35653): OpenClaw \< 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request - Severity: High 7.2 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35652](https://cve.now/CVE-2026-35652): OpenClaw \< 2026.3.22 - Unauthorized Action Execution via Callback Dispatch - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35651](https://cve.now/CVE-2026-35651): OpenClaw 2026.2.13 \< 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt - Severity: Medium 5.3 - Published: Apr 10, 2026 - Affected: from 2026.2.13, fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.7K). ### [CVE-2026-35650](https://cve.now/CVE-2026-35650): OpenClaw \< 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization - Severity: High 7.7 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35649](https://cve.now/CVE-2026-35649): OpenClaw \< 2026.3.22 - Settings Reconciliation Bypass via Empty Allowlist - Severity: Medium 6.3 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35648](https://cve.now/CVE-2026-35648): OpenClaw \< 2026.3.22 - Policy Bypass via Unvalidated Queued Node Actions - Severity: Low 2.3 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35647](https://cve.now/CVE-2026-35647): OpenClaw \< 2026.3.25 - Direct Message Policy Bypass via Verification Notices - Severity: Medium 6.9 - Published: Apr 10, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 12 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35643](https://cve.now/CVE-2026-35643): OpenClaw \< 2026.3.22 - Arbitrary Code Execution via Unvalidated WebView JavascriptInterface - Severity: High 8.6 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35641](https://cve.now/CVE-2026-35641): OpenClaw \< 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation - Severity: High 8.4 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35621](https://cve.now/CVE-2026-35621): OpenClaw \< 2026.3.24 - Privilege Escalation via chat.send to Allowlist Persistence - Severity: High 7.1 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35620](https://cve.now/CVE-2026-35620): OpenClaw \< 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands - Severity: Medium 5.3 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35619](https://cve.now/CVE-2026-35619): OpenClaw \< 2026.3.24 - Authorization Bypass via HTTP /v1/models Endpoint - Severity: Medium 5.3 - Published: Apr 10, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-35646](https://cve.now/CVE-2026-35646): OpenClaw \< 2026.3.25 - Pre-Authentication Rate-Limit Bypass in Webhook Token Validation - Severity: Medium 6.3 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35645](https://cve.now/CVE-2026-35645): OpenClaw \< 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession - Severity: Medium 6.1 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35644](https://cve.now/CVE-2026-35644): OpenClaw \< 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots - Severity: High 7.1 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35642](https://cve.now/CVE-2026-35642): OpenClaw \< 2026.3.25 - Authorization Bypass in Group Reactions via requireMention Bypass - Severity: Medium 5.3 - Published: Apr 9, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35640](https://cve.now/CVE-2026-35640): OpenClaw \< 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing - Severity: Medium 6.9 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35639](https://cve.now/CVE-2026-35639): OpenClaw \< 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validation - Severity: High 8.7 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35638](https://cve.now/CVE-2026-35638): OpenClaw \< 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UI - Severity: High 8.7 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35637](https://cve.now/CVE-2026-35637): OpenClaw \< 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DM - Severity: Medium 6.9 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35636](https://cve.now/CVE-2026-35636): OpenClaw 2026.3.11 \< 2026.3.25 - Session Isolation Bypass via sessionId Resolution - Severity: High 7.1 - Published: Apr 9, 2026 - Affected: from 2026.3.11, fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.3% of openclaw downloads last week were affected versions (7.2K). ### [CVE-2026-35635](https://cve.now/CVE-2026-35635): OpenClaw \< 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat - Severity: Medium 6.3 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35634](https://cve.now/CVE-2026-35634): OpenClaw \< 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway - Severity: Medium 5.1 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.23. - Fixed in 2026.3.23 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (34.7K). ### [CVE-2026-35633](https://cve.now/CVE-2026-35633): OpenClaw \< 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responses - Severity: Medium 6.9 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35632](https://cve.now/CVE-2026-35632): OpenClaw \< 2026.3.24 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update - Severity: Medium 6.9 - Published: Apr 9, 2026 - Affected: through 2026.2.22. - Fixed in 2026.2.23 (released Feb 24, 2026, 44 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.4K). ### [CVE-2026-35631](https://cve.now/CVE-2026-35631): OpenClaw \< 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands - Severity: High 7.1 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35629](https://cve.now/CVE-2026-35629): OpenClaw \< 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel Extensions - Severity: Medium 5.3 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35628](https://cve.now/CVE-2026-35628): OpenClaw \< 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limiting - Severity: Medium 6.3 - Published: Apr 9, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35627](https://cve.now/CVE-2026-35627): OpenClaw \< 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handling - Severity: Medium 6.9 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35626](https://cve.now/CVE-2026-35626): OpenClaw \< 2026.3.22 - Unauthenticated Resource Exhaustion via Voice Call Webhook - Severity: Medium 6.9 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35625](https://cve.now/CVE-2026-35625): OpenClaw \< 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnect - Severity: High 8.5 - Published: Apr 9, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35624](https://cve.now/CVE-2026-35624): OpenClaw \< 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talk - Severity: Low 2.3 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35623](https://cve.now/CVE-2026-35623): OpenClaw \< 2026.3.25 - Brute-Force Attack via Missing Webhook Password Rate Limiting - Severity: Medium 6.3 - Published: Apr 9, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-35622](https://cve.now/CVE-2026-35622): OpenClaw \< 2026.3.22 - Improper Authentication Verification in Google Chat Webhook - Severity: Medium 6.0 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.22. - Fixed in 2026.3.22 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (32.6K). ### [CVE-2026-35618](https://cve.now/CVE-2026-35618): OpenClaw \< 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verification - Severity: High 8.3 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.23. - Fixed in 2026.3.23 (released Mar 23, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.2% of openclaw downloads last week were affected versions (34.7K). ### [CVE-2026-35617](https://cve.now/CVE-2026-35617): OpenClaw \< 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayName - Severity: Low 2.3 - Published: Apr 9, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-34512](https://cve.now/CVE-2026-34512): OpenClaw \< 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpoint - Severity: High 7.2 - Published: Apr 9, 2026 - Affected: through 2026.3.24. - Fixed in 2026.3.28 (released Mar 29, 2026, 11 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-40037](https://cve.now/CVE-2026-40037): OpenClaw \< 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirects - Severity: High 7.1 - Published: Apr 8, 2026 - Affected: fixed in 2026.4.8. - Fixed in 2026.4.8 (released Apr 8, 2026, the day of disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (44.8K). ### [CVE-2026-34511](https://cve.now/CVE-2026-34511): OpenClaw \< 2026.4.2 - PKCE Verifier Exposure via OAuth State Parameter - Severity: Medium 6.0 - Published: Apr 3, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, 1 day before disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-34426](https://cve.now/CVE-2026-34426): OpenClaw - Approval Bypass via Environment Variable Normalization - Severity: Medium 6.9 - Published: Apr 2, 2026 - Affected: fixed in 2026.3.22; fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, the day of disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-34425](https://cve.now/CVE-2026-34425): OpenClaw - Shell-Bleed Protection Preflight Validation Bypass - Severity: Medium 5.3 - Published: Apr 2, 2026 - Affected: fixed in 2026.4.2. - Fixed in 2026.4.2 (released Apr 2, 2026, the day of disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-34510](https://cve.now/CVE-2026-34510): OpenClaw \< 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders - Severity: Medium 6.9 - Published: Apr 1, 2026 - Affected: fixed in 2026.4.2; fixed in 2026.3.22. - Fixed in 2026.4.2 (released Apr 2, 2026, 1 day after disclosure). - The latest release, 2026.11.1, is not affected. - 1.6% of openclaw downloads last week were affected versions (43.9K). ### [CVE-2026-34504](https://cve.now/CVE-2026-34504): OpenClaw \< 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal Provider - Severity: Medium 6.9 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-34503](https://cve.now/CVE-2026-34503): OpenClaw \< 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token Revocation - Severity: High 8.6 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-33581](https://cve.now/CVE-2026-33581): OpenClaw \< 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl Parameters - Severity: High 7.1 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.24. - Fixed in 2026.3.24 (released Mar 25, 2026, 6 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (36.9K). ### [CVE-2026-33580](https://cve.now/CVE-2026-33580): OpenClaw \< 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret Authentication - Severity: Medium 6.3 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-33579](https://cve.now/CVE-2026-33579): OpenClaw \< 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval - Severity: Critical 9.4 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-33578](https://cve.now/CVE-2026-33578): OpenClaw \< 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions - Severity: Medium 5.3 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-33577](https://cve.now/CVE-2026-33577): OpenClaw \< 2026.3.28 - Insufficient Scope Validation in node.pair.approve - Severity: High 8.6 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-33576](https://cve.now/CVE-2026-33576): OpenClaw \< 2026.3.28 - Unauthorized Media Download via Zalo Channel - Severity: Medium 6.9 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-34506](https://cve.now/CVE-2026-34506): OpenClaw \< 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist Configuration - Severity: Low 2.3 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.8. - Fixed in 2026.3.8 (released Mar 9, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.8K). ### [CVE-2026-34505](https://cve.now/CVE-2026-34505): OpenClaw \< 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation - Severity: Medium 6.9 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.12. - Fixed in 2026.3.12 (released Mar 13, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.6K). ### [CVE-2026-32988](https://cve.now/CVE-2026-32988): OpenClaw \< 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation - Severity: Medium 5.8 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32982](https://cve.now/CVE-2026-32982): OpenClaw \< 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logs - Severity: High 8.7 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.13. - Fixed in 2026.3.13 (released Mar 14, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.8K). ### [CVE-2026-32977](https://cve.now/CVE-2026-32977): OpenClaw \< 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Path - Severity: Medium 5.8 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32976](https://cve.now/CVE-2026-32976): OpenClaw \< 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands - Severity: High 7.1 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32971](https://cve.now/CVE-2026-32971): OpenClaw \< 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands - Severity: High 7.3 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32970](https://cve.now/CVE-2026-32970): OpenClaw \< 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs - Severity: Low 2.0 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32921](https://cve.now/CVE-2026-32921): OpenClaw \< 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run - Severity: Medium 5.3 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.8. - Fixed in 2026.3.8 (released Mar 9, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.8K). ### [CVE-2026-32920](https://cve.now/CVE-2026-32920): OpenClaw \< 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins - Severity: High 8.6 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.12. - Fixed in 2026.3.12 (released Mar 13, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.6K). ### [CVE-2026-32917](https://cve.now/CVE-2026-32917): OpenClaw \< 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP - Severity: Critical 9.2 - Published: Mar 31, 2026 - Affected: fixed in 2026.3.13. - Fixed in 2026.3.13 (released Mar 14, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.8K). ### [CVE-2026-32916](https://cve.now/CVE-2026-32916): OpenClaw 2026.3.7 \< 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes - Severity: Critical 9.2 - Published: Mar 31, 2026 - Affected: from 2026.3.7, fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (661). ### [CVE-2026-33575](https://cve.now/CVE-2026-33575): OpenClaw \< 2026.3.12 - Long-lived Credential Exposure in Pairing Setup Codes - Severity: High 8.6 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.12. - Fixed in 2026.3.12 (released Mar 13, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.6K). ### [CVE-2026-33574](https://cve.now/CVE-2026-33574): OpenClaw \< 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Download - Severity: Medium 5.8 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.8. - Fixed in 2026.3.8 (released Mar 9, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.8K). ### [CVE-2026-33573](https://cve.now/CVE-2026-33573): OpenClaw \< 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters - Severity: High 8.7 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-33572](https://cve.now/CVE-2026-33572): OpenClaw \< 2026.2.17 - Insufficient File Permissions in Session Transcript Files - Severity: Medium 6.8 - Published: Mar 29, 2026 - Affected: fixed in 2026.2.17. - Fixed in 2026.2.17 (released Feb 18, 2026, 39 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18.2K). ### [CVE-2026-32987](https://cve.now/CVE-2026-32987): OpenClaw \< 2026.3.13 - Bootstrap Setup Code Replay via Device Pairing - Severity: Critical 9.3 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.13. - Fixed in 2026.3.13 (released Mar 14, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.8K). ### [CVE-2026-32980](https://cve.now/CVE-2026-32980): OpenClaw \< 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request - Severity: High 8.7 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.13. - Fixed in 2026.3.13 (released Mar 14, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.8K). ### [CVE-2026-32979](https://cve.now/CVE-2026-32979): OpenClaw \< 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval - Severity: High 7.0 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32978](https://cve.now/CVE-2026-32978): OpenClaw \< 2026.3.11 - Approval Bypass via Unrecognized Script Runners - Severity: Critical 9.4 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32975](https://cve.now/CVE-2026-32975): OpenClaw \< 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist - Severity: Medium 6.9 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.12. - Fixed in 2026.3.12 (released Mar 13, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.6K). ### [CVE-2026-32974](https://cve.now/CVE-2026-32974): OpenClaw \< 2026.3.12 - Forged Event Injection via Feishu Webhook Verification Token - Severity: High 8.8 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.12. - Fixed in 2026.3.12 (released Mar 13, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.6K). ### [CVE-2026-32973](https://cve.now/CVE-2026-32973): OpenClaw \< 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalization - Severity: High 8.8 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32972](https://cve.now/CVE-2026-32972): OpenClaw \< 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request - Severity: High 7.1 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32924](https://cve.now/CVE-2026-32924): OpenClaw \< 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in Feishu - Severity: Medium 6.9 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.12. - Fixed in 2026.3.12 (released Mar 13, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.6K). ### [CVE-2026-32923](https://cve.now/CVE-2026-32923): OpenClaw \< 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist Enforcement - Severity: Medium 5.3 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32922](https://cve.now/CVE-2026-32922): OpenClaw \< 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate - Severity: Critical 9.4 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32919](https://cve.now/CVE-2026-32919): OpenClaw \< 2026.3.11 - Unauthorized Session Reset via agent Slash Commands - Severity: Medium 6.9 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32918](https://cve.now/CVE-2026-32918): OpenClaw \< 2026.3.11 - Session Sandbox Escape via session\_status Tool - Severity: Critical 9.2 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32915](https://cve.now/CVE-2026-32915): OpenClaw \< 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface - Severity: Critical 9.3 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32914](https://cve.now/CVE-2026-32914): OpenClaw \< 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints - Severity: High 8.7 - Published: Mar 29, 2026 - Affected: fixed in 2026.3.12. - Fixed in 2026.3.12 (released Mar 13, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.6K). ### [CVE-2026-32846](https://cve.now/CVE-2026-32846): OpenClaw \< 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read - Severity: High 8.7 - Published: Mar 26, 2026 - Affected: fixed in 2026.3.28; fixed in 2026.03.28. - Fixed in 2026.3.28 (released Mar 29, 2026, 3 days after disclosure). - The latest release, 2026.11.1, is not affected. - 1.3% of openclaw downloads last week were affected versions (37.4K). ### [CVE-2026-32913](https://cve.now/CVE-2026-32913): OpenClaw \< 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin Redirects - Severity: High 8.8 - Published: Mar 23, 2026 - Affected: fixed in 2026.3.7. - Fixed in 2026.3.7 (released Mar 8, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.6K). ### [CVE-2026-27646](https://cve.now/CVE-2026-27646): OpenClaw \< 2026.3.7 - Sandbox Escape via /acp spawn Command - Severity: Medium 5.8 - Published: Mar 23, 2026 - Affected: fixed in 2026.3.7. - Fixed in 2026.3.7 (released Mar 8, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.6K). ### [CVE-2026-27183](https://cve.now/CVE-2026-27183): OpenClaw \< 2026.3.7 - Shell Approval Gating Bypass via Dispatch Wrapper Depth Mismatch - Severity: Low 2.1 - Published: Mar 23, 2026 - Affected: fixed in 2026.3.7. - Fixed in 2026.3.7 (released Mar 8, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (29.6K). ### [CVE-2026-32899](https://cve.now/CVE-2026-32899): OpenClaw \< 2026.2.25 - Sender Policy Bypass in Slack Reaction and Pin Event Handlers - Severity: Medium 5.3 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32898](https://cve.now/CVE-2026-32898): OpenClaw \< 2026.2.23 - ACP Permission Auto-Approval Bypass via Untrusted Tool Metadata - Severity: Medium 5.3 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-32897](https://cve.now/CVE-2026-32897): OpenClaw \< 2026.2.22 - Authentication Token Reuse in Owner ID Prompt Hashing Fallback - Severity: Medium 6.3 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32896](https://cve.now/CVE-2026-32896): OpenClaw \< 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles Plugin - Severity: Medium 6.3 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32895](https://cve.now/CVE-2026-32895): OpenClaw \< 2026.2.26 - Sender Authorization Bypass in Slack System Event Handlers - Severity: Medium 5.3 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32067](https://cve.now/CVE-2026-32067): OpenClaw \< 2026.2.26 - Cross-Account Authorization Bypass in DM Pairing Store - Severity: Low 2.0 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32065](https://cve.now/CVE-2026-32065): OpenClaw \< 2026.2.25 - Approval Identity Mismatch in system.run Command Execution - Severity: Medium 5.7 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32064](https://cve.now/CVE-2026-32064): OpenClaw \< 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC Observer - Severity: High 8.5 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32058](https://cve.now/CVE-2026-32058): OpenClaw \< 2026.2.26 - Approval Context-Binding Weakness in system.run via host=node - Severity: Low 2.0 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32057](https://cve.now/CVE-2026-32057): OpenClaw \< 2026.2.25 - Authentication Bypass via Control UI client.id Parameter - Severity: Medium 6.0 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32056](https://cve.now/CVE-2026-32056): OpenClaw \< 2026.2.22 - Remote Code Execution via Shell Startup Environment Variable Injection in system.run - Severity: High 7.7 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32055](https://cve.now/CVE-2026-32055): OpenClaw \< 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink - Severity: High 7.2 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32054](https://cve.now/CVE-2026-32054): OpenClaw \< 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling - Severity: Medium 5.9 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32053](https://cve.now/CVE-2026-32053): OpenClaw \< 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization - Severity: Medium 6.9 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-32052](https://cve.now/CVE-2026-32052): OpenClaw \< 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers - Severity: Medium 5.8 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-32051](https://cve.now/CVE-2026-32051): OpenClaw \< 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access - Severity: High 8.7 - Published: Mar 21, 2026 - Affected: fixed in 2026.3.1. - Fixed in 2026.3.1 (released Mar 2, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.6K). ### [CVE-2026-32050](https://cve.now/CVE-2026-32050): OpenClaw \< 2026.2.25 - Unauthorized Reaction Status Event Enqueue via Access Check Bypass - Severity: Medium 6.3 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32049](https://cve.now/CVE-2026-32049): OpenClaw \< 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass - Severity: High 8.7 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32048](https://cve.now/CVE-2026-32048): OpenClaw \< 2026.3.1 - Sandbox Escape via Cross-Agent sessions\_spawn - Severity: High 7.7 - Published: Mar 21, 2026 - Affected: fixed in 2026.3.1. - Fixed in 2026.3.1 (released Mar 2, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.6K). ### [CVE-2026-32046](https://cve.now/CVE-2026-32046): OpenClaw \< 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flag - Severity: Medium 4.8 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32045](https://cve.now/CVE-2026-32045): OpenClaw \< 2026.2.21 - Authentication Bypass in HTTP Gateway Routes via Tokenless Tailscale Auth - Severity: High 8.2 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32044](https://cve.now/CVE-2026-32044): OpenClaw \< 2026.3.2 - Tar Archive Safety Bypass in Skills Installation - Severity: Medium 6.7 - Published: Mar 21, 2026 - Affected: fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.9K). ### [CVE-2026-32043](https://cve.now/CVE-2026-32043): OpenClaw \< 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter - Severity: Medium 5.9 - Published: Mar 21, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32042](https://cve.now/CVE-2026-32042): OpenClaw \< 2026.2.25 - Privilege Escalation via Unpaired Device Identity in Shared Gateway Authentication - Severity: High 8.7 - Published: Mar 21, 2026 - Affected: from 2026.2.22, fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (715). ### [CVE-2026-32041](https://cve.now/CVE-2026-32041): OpenClaw \< 2026.3.1 - Unauthenticated Browser Control Access via Failed Auth Bootstrap - Severity: High 7.5 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.1. - Fixed in 2026.3.1 (released Mar 2, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.6K). ### [CVE-2026-32040](https://cve.now/CVE-2026-32040): OpenClaw \< 2026.2.23 - HTML Injection via Unvalidated Image MIME Type in Data-URL Interpolation - Severity: Low 2.4 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-32039](https://cve.now/CVE-2026-32039): OpenClaw \< 2026.2.22 - Sender Authorization Bypass via Identity Collision in toolsBySender - Severity: Medium 6.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32038](https://cve.now/CVE-2026-32038): OpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter - Severity: Critical 9.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-32037](https://cve.now/CVE-2026-32037): OpenClaw \< 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling - Severity: Low 2.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32036](https://cve.now/CVE-2026-32036): OpenClaw \< 2026.2.26- Authentication Bypass via Encoded Dot-Segment Traversal in /api/channels - Severity: High 8.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32035](https://cve.now/CVE-2026-32035): OpenClaw \< 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript Handler - Severity: Medium 5.8 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.9K). ### [CVE-2026-32034](https://cve.now/CVE-2026-32034): OpenClaw \< 2026.2.21 - Insecure Control UI Authentication over Plaintext HTTP - Severity: Medium 6.1 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32033](https://cve.now/CVE-2026-32033): OpenClaw \< 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary Validation - Severity: Medium 6.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-32032](https://cve.now/CVE-2026-32032): OpenClaw \< 2026.2.22 - Arbitrary Shell Execution via Unvalidated SHELL Environment Variable - Severity: High 7.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32031](https://cve.now/CVE-2026-32031): OpenClaw \< 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels Gateway - Severity: Medium 6.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32030](https://cve.now/CVE-2026-32030): OpenClaw \< 2026.2.19 - Sensitive File Disclosure via stageSandboxMedia Path Traversal - Severity: High 8.2 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-32029](https://cve.now/CVE-2026-32029): OpenClaw \< 2026.2.21 - Client IP Spoofing via X-Forwarded-For Header Parsing - Severity: Medium 6.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32028](https://cve.now/CVE-2026-32028): OpenClaw \< 2026.2.25 - Missing Authorization Check in Discord DM Reaction Ingress - Severity: Medium 6.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32027](https://cve.now/CVE-2026-32027): OpenClaw \< 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group Allowlist - Severity: High 7.1 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32026](https://cve.now/CVE-2026-32026): OpenClaw \< 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandbox - Severity: High 7.1 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-32025](https://cve.now/CVE-2026-32025): OpenClaw \< 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication Bypass - Severity: High 7.5 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32024](https://cve.now/CVE-2026-32024): OpenClaw \< 2026.2.22 - Symlink Traversal in Avatar Handling - Severity: Medium 6.8 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32023](https://cve.now/CVE-2026-32023): OpenClaw \< 2026.2.24 - Approval Gating Bypass via Dispatch-Wrapper Depth-Cap Mismatch in system.run - Severity: Medium 6.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-32022](https://cve.now/CVE-2026-32022): OpenClaw \< 2026.2.21 - Arbitrary File Read via grep -e Flag Policy Bypass - Severity: Medium 6.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32021](https://cve.now/CVE-2026-32021): OpenClaw \< 2026.2.22 - Authorization Bypass via Display Name Collision in Feishu allowFrom - Severity: Medium 6.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32020](https://cve.now/CVE-2026-32020): OpenClaw \< 2026.2.22 - Arbitrary File Read via Symlink Following in Static File Handler - Severity: Medium 4.8 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32019](https://cve.now/CVE-2026-32019): OpenClaw \< 2026.2.22 - Incomplete IPv4 Special-Use Range Blocking in SSRF Guard - Severity: Low 2.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32018](https://cve.now/CVE-2026-32018): OpenClaw \< 2026.2.19 - Race Condition in Sandbox Registry Write Operations - Severity: Low 2.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-32017](https://cve.now/CVE-2026-32017): OpenClaw \< 2026.2.19 - Arbitrary File Write via Short-Option Bypass in exec Allowlist - Severity: Medium 6.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-32016](https://cve.now/CVE-2026-32016): OpenClaw \< 2026.2.22 - Path Traversal via Basename-Only Allowlist Matching on macOS - Severity: High 7.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32015](https://cve.now/CVE-2026-32015): OpenClaw 2026.1.21 \< 2026.2.19 - PATH Hijacking Bypass in tools.exec.safeBins Allowlist Validation - Severity: High 7.3 - Published: Mar 19, 2026 - Affected: from 2026.1.21, fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.1% of openclaw downloads last week were affected versions (3.2K). ### [CVE-2026-32014](https://cve.now/CVE-2026-32014): OpenClaw \< 2026.2.26 - Node Reconnect Metadata Spoofing via Unsigned Platform Fields - Severity: High 8.6 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32013](https://cve.now/CVE-2026-32013): OpenClaw \< 2026.2.25 - Symlink Traversal in agents.files Methods - Severity: High 8.7 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32011](https://cve.now/CVE-2026-32011): OpenClaw \< 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body Parsing - Severity: High 8.7 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.9K). ### [CVE-2026-32010](https://cve.now/CVE-2026-32010): OpenClaw \< 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter - Severity: Medium 5.8 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32009](https://cve.now/CVE-2026-32009): OpenClaw \< 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBins - Severity: High 7.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-32008](https://cve.now/CVE-2026-32008): OpenClaw \< 2026.2.21 - Arbitrary Local File Read via Browser Navigation Guard - Severity: High 7.1 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 26 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32007](https://cve.now/CVE-2026-32007): OpenClaw \< 2026.2.23 - Sandbox Bypass in apply\_patch Tool via Workspace-Only Check Bypass - Severity: High 7.6 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-32006](https://cve.now/CVE-2026-32006): OpenClaw \< 2026.2.26 - Authorization Bypass via DM Pairing-Store Fallback in Group Allowlist - Severity: Low 2.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-32005](https://cve.now/CVE-2026-32005): OpenClaw \< 2026.2.25 - Authorization Bypass in Interactive Callbacks via Sender Check Skip - Severity: High 7.6 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-32004](https://cve.now/CVE-2026-32004): OpenClaw \< 2026.3.2 - Authentication Bypass via Encoded Path in /api/channels Route - Severity: High 8.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.9K). ### [CVE-2026-32003](https://cve.now/CVE-2026-32003): OpenClaw \< 2026.2.22 - Remote Code Execution via SHELLOPTS/PS4 Environment Injection in system.run - Severity: High 7.5 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32002](https://cve.now/CVE-2026-32002): OpenClaw \< 2026.2.23 - Sandbox Boundary Bypass via Image Tool workspaceOnly Bypass - Severity: Medium 6.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-32001](https://cve.now/CVE-2026-32001): OpenClaw \< 2026.2.22 - Node Role Device-Identity Bypass via WebSocket Authentication - Severity: Medium 5.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32000](https://cve.now/CVE-2026-32000): OpenClaw \< 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool Execution - Severity: Medium 5.8 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-31999](https://cve.now/CVE-2026-31999): OpenClaw 2026.2.26 \< 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback - Severity: Medium 5.8 - Published: Mar 19, 2026 - Affected: from 2026.2.26, fixed in 2026.3.1. - Fixed in 2026.3.1 (released Mar 2, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (217). ### [CVE-2026-31998](https://cve.now/CVE-2026-31998): OpenClaw 2026.2.22 \< 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIds - Severity: High 8.3 - Published: Mar 19, 2026 - Affected: from 2026.2.22, fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 22 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (326). ### [CVE-2026-31997](https://cve.now/CVE-2026-31997): OpenClaw \< 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run Approvals - Severity: Medium 4.4 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.1. - Fixed in 2026.3.1 (released Mar 2, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.6K). ### [CVE-2026-31996](https://cve.now/CVE-2026-31996): OpenClaw \< 2026.2.19 - safeBins stdin-only bypass via sort output and recursive grep flags - Severity: Low 2.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-31995](https://cve.now/CVE-2026-31995): OpenClaw 2026.1.21 \< 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Extension - Severity: Medium 5.8 - Published: Mar 19, 2026 - Affected: from 2026.1.21, fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.1% of openclaw downloads last week were affected versions (3.2K). ### [CVE-2026-31994](https://cve.now/CVE-2026-31994): OpenClaw \< 2026.2.19 - Local Command Injection via Unsafe cmd Argument Handling in Windows Scheduled Task Script Generation - Severity: Medium 6.9 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 28 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-31993](https://cve.now/CVE-2026-31993): OpenClaw \< 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell Chains - Severity: Medium 5.6 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-31992](https://cve.now/CVE-2026-31992): OpenClaw \< 2026.2.23 - Allowlist Exec-Guard Bypass via env -S - Severity: High 7.1 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 23 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-31991](https://cve.now/CVE-2026-31991): OpenClaw \< 2026.2.26 - Authorization Bypass via DM Pairing-Store Leakage in Signal Group Allowlist - Severity: Low 2.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-31990](https://cve.now/CVE-2026-31990): OpenClaw \< 2026.3.2 - Symlink Traversal in stageSandboxMedia Destination - Severity: Medium 6.9 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.9K). ### [CVE-2026-31989](https://cve.now/CVE-2026-31989): OpenClaw \< 2026.3.1 - Server-Side Request Forgery via web\_search Citation Redirect - Severity: Medium 5.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.1. - Fixed in 2026.3.1 (released Mar 2, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.6K). ### [CVE-2026-29608](https://cve.now/CVE-2026-29608): OpenClaw 2026.3.1 \< 2026.3.2 - Approval Integrity Bypass via system.run argv Rewriting - Severity: Medium 5.4 - Published: Mar 19, 2026 - Affected: from 2026.3.1, fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (244). ### [CVE-2026-29607](https://cve.now/CVE-2026-29607): OpenClaw \< 2026.2.22 - Authorization Bypass via allow-always Wrapper Persistence - Severity: High 7.1 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-28461](https://cve.now/CVE-2026-28461): OpenClaw \< 2026.3.1 - Unbounded Memory Growth in Zalo Webhook via Query String Key Churn - Severity: High 8.7 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.1. - Fixed in 2026.3.1 (released Mar 2, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.6K). ### [CVE-2026-28460](https://cve.now/CVE-2026-28460): OpenClaw \< 2026.2.22 - Allowlist Bypass via Shell Line-Continuation Command Substitution in system.run - Severity: Medium 6.0 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-28449](https://cve.now/CVE-2026-28449): OpenClaw \< 2026.2.25 - Webhook Replay Attack via Missing Durable Replay Suppression - Severity: Medium 6.3 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.25. - Fixed in 2026.2.25 (released Feb 26, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20K). ### [CVE-2026-27670](https://cve.now/CVE-2026-27670): OpenClaw \< 2026.3.2 - Arbitrary File Write via ZIP Extraction Parent Symlink Race Condition - Severity: Medium 5.8 - Published: Mar 19, 2026 - Affected: fixed in 2026.3.2. - Fixed in 2026.3.2 (released Mar 3, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.9K). ### [CVE-2026-27566](https://cve.now/CVE-2026-27566): OpenClaw \< 2026.2.22 - Allowlist Bypass via Wrapper Binary Unwrapping in system.run - Severity: High 7.1 - Published: Mar 19, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-27545](https://cve.now/CVE-2026-27545): OpenClaw \< 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory Rebind - Severity: Medium 6.9 - Published: Mar 18, 2026 - Affected: fixed in 2026.2.26. - Fixed in 2026.2.26 (released Feb 26, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (20.4K). ### [CVE-2026-27524](https://cve.now/CVE-2026-27524): OpenClaw \< 2026.2.21 - Prototype Pollution via Debug Override Path - Severity: Low 2.3 - Published: Mar 18, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 25 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-27523](https://cve.now/CVE-2026-27523): OpenClaw \< 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Paths - Severity: Medium 6.9 - Published: Mar 18, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-27522](https://cve.now/CVE-2026-27522): OpenClaw \< 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message Actions - Severity: High 7.1 - Published: Mar 18, 2026 - Affected: fixed in 2026.2.24. - Fixed in 2026.2.24 (released Feb 25, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.6K). ### [CVE-2026-32302](https://cve.now/CVE-2026-32302): OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode - Severity: High 8.1 - Published: Mar 12, 2026 - Affected: fixed in 2026.3.11. - Fixed in 2026.3.11 (released Mar 12, 2026, the day of disclosure). - The latest release, 2026.11.1, is not affected. - 1.1% of openclaw downloads last week were affected versions (30.2K). ### [CVE-2026-32063](https://cve.now/CVE-2026-32063): OpenClaw 2026.2.19-2 \< 2026.2.21 - Command Injection via Newline in systemd Unit Generation - Severity: Medium 6.9 - Published: Mar 11, 2026 - Affected: fixed in 2026.2.21. - Fixed in 2026.2.21 (released Feb 21, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19K). ### [CVE-2026-32062](https://cve.now/CVE-2026-32062): OpenClaw 2026.2.21-2 \< 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream - Severity: High 8.7 - Published: Mar 11, 2026 - Affected: fixed in 2026.2.22. - Fixed in 2026.2.22 (released Feb 23, 2026, 16 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.3K). ### [CVE-2026-32061](https://cve.now/CVE-2026-32061): OpenClaw \< 2026.2.17 - Arbitrary File Read via $include Directive Path Traversal - Severity: Medium 6.7 - Published: Mar 11, 2026 - Affected: fixed in 2026.2.17. - Fixed in 2026.2.17 (released Feb 18, 2026, 21 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18.2K). ### [CVE-2026-32060](https://cve.now/CVE-2026-32060): OpenClaw \< 2026.2.14 - Path Traversal in apply\_patch via Crafted Paths - Severity: High 8.7 - Published: Mar 11, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 24 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-32059](https://cve.now/CVE-2026-32059): OpenClaw 2026.2.22-2 \< 2026.2.23 - Allowlist Bypass via sort Long-Option Abbreviation in tools.exec.safeBins - Severity: High 8.7 - Published: Mar 11, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 15 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-29613](https://cve.now/CVE-2026-29613): OpenClaw \< 2026.2.12 - Webhook Authentication Bypass via Loopback remoteAddress Trust - Severity: High 8.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.12. - Fixed in 2026.2.12 (released Feb 13, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.6K). ### [CVE-2026-29612](https://cve.now/CVE-2026-29612): OpenClaw \< 2026.2.14 - Denial of Service via Large Base64 Media File Decoding - Severity: Medium 6.8 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-29611](https://cve.now/CVE-2026-29611): OpenClaw \< 2026.2.14 - Local File Inclusion via mediaPath Parameter in BlueBubbles Media Handling - Severity: High 8.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-29610](https://cve.now/CVE-2026-29610): OpenClaw \< 2026.2.14 - Command Hijacking via Unsafe PATH Handling - Severity: High 7.7 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-29609](https://cve.now/CVE-2026-29609): OpenClaw \< 2026.2.14 - Denial of Service via Unbounded URL-backed Media Fetch - Severity: High 8.7 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-29606](https://cve.now/CVE-2026-29606): OpenClaw \< 2026.2.14 - Webhook Signature Verification Bypass via ngrok Loopback Compatibility - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28486](https://cve.now/CVE-2026-28486): OpenClaw 2026.1.16-2 \< 2026.2.14 - Path Traversal (Zip Slip) in Archive Extraction via Installation Commands - Severity: Medium 6.8 - Published: Mar 5, 2026 - Affected: from 2026.1.16-2, fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (2.5K). ### [CVE-2026-28482](https://cve.now/CVE-2026-28482): OpenClaw \< 2026.2.12 - Path Traversal via Unsanitized sessionId and sessionFile Parameters - Severity: High 8.4 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.12. - Fixed in 2026.2.12 (released Feb 13, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.6K). ### [CVE-2026-28481](https://cve.now/CVE-2026-28481): OpenClaw \< 2026.2.1 - Bearer Token Leakage via MS Teams Attachment Downloader Suffix Matching - Severity: Medium 5.9 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.1. - Fixed in 2026.2.1 (released Feb 2, 2026, 31 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.3K). ### [CVE-2026-28480](https://cve.now/CVE-2026-28480): OpenClaw \< 2026.2.14 - Identity Spoofing via Mutable Username in Telegram Allowlist Authorization - Severity: Medium 6.9 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28479](https://cve.now/CVE-2026-28479): OpenClaw \< 2026.2.15 - Cache Poisoning via Deprecated SHA-1 Hash in Sandbox Configuration - Severity: High 8.7 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-28478](https://cve.now/CVE-2026-28478): OpenClaw \< 2026.2.13 - Denial of Service via Unbounded Webhook Request Body Buffering - Severity: High 8.7 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.13. - Fixed in 2026.2.13 (released Feb 14, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.8K). ### [CVE-2026-28477](https://cve.now/CVE-2026-28477): OpenClaw \< 2026.2.14 - OAuth State Validation Bypass in Manual Chutes Login Flow - Severity: Medium 5.9 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28476](https://cve.now/CVE-2026-28476): OpenClaw \< 2026.2.14 - Server-Side Request Forgery in Tlon Extension Authentication - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28475](https://cve.now/CVE-2026-28475): OpenClaw \< 2026.2.13 - Timing Attack via Hook Token Comparison - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.13. - Fixed in 2026.2.13 (released Feb 14, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.8K). ### [CVE-2026-28473](https://cve.now/CVE-2026-28473): OpenClaw \< 2026.2.2 - Authorization Bypass via /approve Chat Command - Severity: High 7.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.2. - Fixed in 2026.2.2 (released Feb 4, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.8K). ### [CVE-2026-28472](https://cve.now/CVE-2026-28472): OpenClaw \< 2026.2.2 - Device Identity Check Bypass in Gateway WebSocket Connect Handshake - Severity: Critical 9.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.2. - Fixed in 2026.2.2 (released Feb 4, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.8K). ### [CVE-2026-28471](https://cve.now/CVE-2026-28471): OpenClaw 2026.1.14-1 \< 2026.2.2 - Allowlist Bypass via displayName and Cross-Homeserver localpart Matching in Matrix Plugin - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: from 2026.1.14-1, fixed in 2026.2.2. - Fixed in 2026.2.2 (released Feb 4, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (1.5K). ### [CVE-2026-28470](https://cve.now/CVE-2026-28470): OpenClaw \< 2026.2.2 - Exec Allowlist Bypass via Command Substitution in Double Quotes - Severity: Critical 9.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.2. - Fixed in 2026.2.2 (released Feb 4, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.8K). ### [CVE-2026-28469](https://cve.now/CVE-2026-28469): OpenClaw \< 2026.2.14 - Cross-Account Policy Context Misrouting via Shared Webhook Path Ambiguity - Severity: High 8.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28468](https://cve.now/CVE-2026-28468): OpenClaw 2026.1.29-beta.1 \< 2026.2.14 - Authentication Bypass in Sandbox Browser Bridge Server - Severity: High 8.5 - Published: Mar 5, 2026 - Affected: from 2026.1.29-beta.1, fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (2.5K). ### [CVE-2026-28467](https://cve.now/CVE-2026-28467): OpenClaw \< 2026.2.2 - SSRF via Attachment Media URL Hydration - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.2. - Fixed in 2026.2.2 (released Feb 4, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.8K). ### [CVE-2026-28466](https://cve.now/CVE-2026-28466): OpenClaw \< 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass - Severity: Critical 9.4 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28464](https://cve.now/CVE-2026-28464): OpenClaw \< 2026.2.12 - Timing Attack in Hooks Token Authentication - Severity: High 8.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.12. - Fixed in 2026.2.12 (released Feb 13, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.6K). ### [CVE-2026-28463](https://cve.now/CVE-2026-28463): OpenClaw \< 2026.2.14 - Arbitrary File Read via Shell Expansion in Safe Bins Allowlist - Severity: High 8.6 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28462](https://cve.now/CVE-2026-28462): OpenClaw \< 2026.2.13 - Path Traversal in Trace and Download Output Paths - Severity: High 8.7 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.13. - Fixed in 2026.2.13 (released Feb 14, 2026, 19 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.8K). ### [CVE-2026-28459](https://cve.now/CVE-2026-28459): OpenClaw \< 2026.2.12 - Arbitrary File Write via Untrusted sessionFile Path - Severity: High 7.1 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.12. - Fixed in 2026.2.12 (released Feb 13, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.6K). ### [CVE-2026-28458](https://cve.now/CVE-2026-28458): OpenClaw 2026.1.20 \< 2026.2.1 - Missing Authentication in Browser Relay /cdp WebSocket Endpoint - Severity: High 7.4 - Published: Mar 5, 2026 - Affected: from 2026.1.20, fixed in 2026.2.1. - Fixed in 2026.2.1 (released Feb 2, 2026, 31 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (867). ### [CVE-2026-28457](https://cve.now/CVE-2026-28457): OpenClaw \< 2026.2.14 - Path Traversal in Sandbox Skill Mirroring via Name Parameter - Severity: Medium 5.6 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28456](https://cve.now/CVE-2026-28456): OpenClaw 2026.1.5 \< 2026.2.14 - Arbitrary Code Execution via Unsafe Hook Module Path Handling - Severity: High 8.6 - Published: Mar 5, 2026 - Affected: from 2026.1.5, fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (2.5K). ### [CVE-2026-28454](https://cve.now/CVE-2026-28454): OpenClaw \< 2026.2.2 - Authorization Bypass via Unauthenticated Telegram Webhook - Severity: High 8.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.1. - Fixed in 2026.2.1 (released Feb 2, 2026, 31 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.3K). ### [CVE-2026-28453](https://cve.now/CVE-2026-28453): OpenClaw \< 2026.2.14 - Zip Slip Path Traversal in TAR Archive Extraction - Severity: High 8.3 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28452](https://cve.now/CVE-2026-28452): OpenClaw \< 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive - Severity: Medium 6.7 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28451](https://cve.now/CVE-2026-28451): OpenClaw \< 2026.2.14 - SSRF via Feishu Extension Media Fetching - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28450](https://cve.now/CVE-2026-28450): OpenClaw \< 2026.2.12 - Unauthenticated Profile Tampering via Nostr Plugin HTTP Endpoints - Severity: High 8.3 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.12. - Fixed in 2026.2.12 (released Feb 13, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.6K). ### [CVE-2026-28448](https://cve.now/CVE-2026-28448): OpenClaw 2026.1.29 \< 2026.2.1 - Authorization Bypass in Twitch Plugin allowFrom Access Control - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: from 2026.1.29, fixed in 2026.2.1. - Fixed in 2026.2.1 (released Feb 2, 2026, 31 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (409). ### [CVE-2026-28447](https://cve.now/CVE-2026-28447): OpenClaw 2026.1.29-beta.1 \< 2026.2.1 - Path Traversal in Plugin Installation via Package Name - Severity: High 7.0 - Published: Mar 5, 2026 - Affected: from 2026.1.20, fixed in 2026.2.1. - Fixed in 2026.2.1 (released Feb 2, 2026, 31 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (867). ### [CVE-2026-28446](https://cve.now/CVE-2026-28446): OpenClaw \< 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching - Severity: Critical 9.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.2. - Fixed in 2026.2.2 (released Feb 4, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.8K). ### [CVE-2026-28395](https://cve.now/CVE-2026-28395): OpenClaw 2026.1.14-1 \< 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl - Severity: Medium 6.3 - Published: Mar 5, 2026 - Affected: from 2026.1.14-1, fixed in 2026.2.12. - Fixed in 2026.2.12 (released Feb 13, 2026, 20 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (2.2K). ### [CVE-2026-28394](https://cve.now/CVE-2026-28394): OpenClaw \< 2026.2.15 - Denial of Service via Unbounded Response Parsing in web\_fetch Tool - Severity: Medium 6.9 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 17 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-28393](https://cve.now/CVE-2026-28393): OpenClaw 2.0.0-beta3 \< 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversal - Severity: High 8.3 - Published: Mar 5, 2026 - Affected: from 2.0.0-beta3, fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (2.5K). ### [CVE-2026-28392](https://cve.now/CVE-2026-28392): OpenClaw \< 2026.2.14 - Privilege Escalation in Slack Slash Command Handler via Direct Messages - Severity: High 8.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 18 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-28391](https://cve.now/CVE-2026-28391): OpenClaw \< 2026.2.2 - Command Injection via cmd.exe Parsing Bypass in Allowlist Enforcement - Severity: Critical 9.2 - Published: Mar 5, 2026 - Affected: fixed in 2026.2.2. - Fixed in 2026.2.2 (released Feb 4, 2026, 29 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (16.8K). ### [CVE-2026-28363](https://cve.now/CVE-2026-28363): In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as… - Severity: Critical 9.9 - Published: Feb 27, 2026 - Affected: fixed in 2026.2.23. - Fixed in 2026.2.23 (released Feb 24, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (19.5K). ### [CVE-2026-27576](https://cve.now/CVE-2026-27576): OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs - Severity: Medium 4.8 - Published: Feb 21, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-27488](https://cve.now/CVE-2026-27488): OpenClaw hardened cron webhook delivery against SSRF - Severity: Medium 6.9 - Published: Feb 21, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-27487](https://cve.now/CVE-2026-27487): OpenClaw: Prevent shell injection in macOS keychain credential write - Severity: High 7.6 - Published: Feb 21, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 6 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-27486](https://cve.now/CVE-2026-27486): OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup - Severity: Medium 4.3 - Published: Feb 21, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 6 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-27485](https://cve.now/CVE-2026-27485): OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection - Severity: Medium 4.6 - Published: Feb 21, 2026 - Affected: fixed in 2026.2.19. - Fixed in 2026.2.19 (released Feb 19, 2026, 2 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.6K). ### [CVE-2026-27484](https://cve.now/CVE-2026-27484): OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows - Severity: Low 2.3 - Published: Feb 21, 2026 - Affected: fixed in 2026.2.18. - Fixed in 2026.2.19 (released Feb 19, 2026, 2 days before disclosure, the advisory names 2026.2.18, which was never published). - The latest release, 2026.11.1, is not affected. - 0.7% of openclaw downloads last week were affected versions (18.5K). ### [CVE-2026-27009](https://cve.now/CVE-2026-27009): OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection - Severity: Medium 5.8 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-27008](https://cve.now/CVE-2026-27008): OpenClaw hardened the skill download target directory validation - Severity: Medium 6.8 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-27007](https://cve.now/CVE-2026-27007): OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation - Severity: Medium 4.8 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-27004](https://cve.now/CVE-2026-27004): OpenClaw session tool visibility hardening and Telegram webhook secret fallback - Severity: Medium 6.9 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-27003](https://cve.now/CVE-2026-27003): OpenClaw: Telegram bot token exposure via logs - Severity: Medium 6.9 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-27002](https://cve.now/CVE-2026-27002): OpenClaw: Docker container escape via unvalidated bind mount config injection - Severity: High 7.7 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-27001](https://cve.now/CVE-2026-27001): OpenClaw: Unsanitized CWD path injection into LLM prompts - Severity: High 8.6 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.15. - Fixed in 2026.2.15 (released Feb 16, 2026, 3 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (18K). ### [CVE-2026-26972](https://cve.now/CVE-2026-26972): OpenClaw has a Path Traversal in Browser Download Functionality - Severity: Medium 6.7 - Published: Feb 19, 2026 - Affected: from 2026.1.12, fixed in 2026.2.13. - Fixed in 2026.2.13 (released Feb 14, 2026, 5 days before disclosure). - The latest release, 2026.11.1, is not affected. - <0.1% of openclaw downloads last week were affected versions (2.4K). ### [CVE-2026-26329](https://cve.now/CVE-2026-26329): OpenClaw has a path traversal in browser upload allows local file read - Severity: High 7.1 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 4 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-26328](https://cve.now/CVE-2026-26328): OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities - Severity: Medium 6.5 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 4 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-26327](https://cve.now/CVE-2026-26327): OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning - Severity: High 7.1 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 4 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-26326](https://cve.now/CVE-2026-26326): OpenClaw skills.status could leak secrets to operator.read clients - Severity: Medium 5.3 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 4 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). ### [CVE-2026-26325](https://cve.now/CVE-2026-26325): OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals - Severity: High 7.2 - Published: Feb 19, 2026 - Affected: fixed in 2026.2.14. - Fixed in 2026.2.14 (released Feb 15, 2026, 4 days before disclosure). - The latest release, 2026.11.1, is not affected. - 0.6% of openclaw downloads last week were affected versions (17.9K). More advisories name this package than the page lists; the oldest are left out. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/openclaw Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.