# cve.now: Openclaw

The newest entries naming Openclaw as an affected vendor (up to 200), of 672 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-110689](https://cve.now/CVE-2026-110689.md): OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism (CVSS 4.8)
- [CVE-2026-101884](https://cve.now/CVE-2026-101884.md): OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override (CVSS 7.7)
- [CVE-2026-101883](https://cve.now/CVE-2026-101883.md): OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present (CVSS 5.3)
- [CVE-2026-101882](https://cve.now/CVE-2026-101882.md): OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set (CVSS 8.7)
- [CVE-2026-101881](https://cve.now/CVE-2026-101881.md): OpenClaw Windows Node before 2026.7.1 Denial of Service (CVSS 7.1)
- [CVE-2026-101880](https://cve.now/CVE-2026-101880.md): OpenClaw Windows Node before 2026.7.1 Authorization Bypass (CVSS 8.7)
- [CVE-2026-101879](https://cve.now/CVE-2026-101879.md): OpenClaw Windows Node before 2026.7.1-3 Missing Authorization (CVSS 7.1)
- [CVE-2026-102807](https://cve.now/CVE-2026-102807.md): OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket (CVSS 6.0)
- [CVE-2026-102806](https://cve.now/CVE-2026-102806.md): OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines (CVSS 6.0)
- [CVE-2026-100604](https://cve.now/CVE-2026-100604.md): ClawHub Authentication Bypass via Former Publisher Skill Control (CVSS 5.3)
- [CVE-2026-100603](https://cve.now/CVE-2026-100603.md): ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports (CVSS 8.7)
- [CVE-2026-100602](https://cve.now/CVE-2026-100602.md): ClawHub Changelog Preview Information Disclosure via Authorization Bypass (CVSS 7.1)
- [CVE-2026-100601](https://cve.now/CVE-2026-100601.md): ClawHub SSRF via Unchecked DNS Resolution in Profile Image (CVSS 6.9)
- [CVE-2026-100600](https://cve.now/CVE-2026-100600.md): ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API (CVSS 6.9)
- [CVE-2026-100599](https://cve.now/CVE-2026-100599.md): OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome (CVSS 8.7)
- [CVE-2026-100598](https://cve.now/CVE-2026-100598.md): OpenClaw before 2026.7.1 Approval Binding Logic Error (CVSS 7.5)
- [CVE-2026-100597](https://cve.now/CVE-2026-100597.md): OpenClaw before 2026.7.1 Path Traversal via Filesystem Race (CVSS 8.8)
- [CVE-2026-100596](https://cve.now/CVE-2026-100596.md): OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration (CVSS 8.7)
- [CVE-2026-100595](https://cve.now/CVE-2026-100595.md): OpenClaw before 2026.7.1 Authorization Bypass via diagnostics (CVSS 7.1)
- [CVE-2026-100594](https://cve.now/CVE-2026-100594.md): OpenClaw before 2026.7.1 Authorization Bypass via trajectory export (CVSS 7.1)
- [CVE-2026-100593](https://cve.now/CVE-2026-100593.md): OpenClaw before 2026.7.1 Authentication Bypass via activation (CVSS 5.3)
- [CVE-2026-100592](https://cve.now/CVE-2026-100592.md): OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming (CVSS 5.3)
- [CVE-2026-100591](https://cve.now/CVE-2026-100591.md): OpenClaw before 2026.7.1 Authentication Bypass via Active Memory (CVSS 5.3)
- [CVE-2026-100590](https://cve.now/CVE-2026-100590.md): OpenClaw before 2026.7.1 Authorization Bypass via voice set (CVSS 5.3)
- [CVE-2026-100589](https://cve.now/CVE-2026-100589.md): OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node (CVSS 8.7)
- [CVE-2026-100588](https://cve.now/CVE-2026-100588.md): OpenClaw before 2026.7.1 Authentication Bypass via node.invoke (CVSS 8.7)
- [CVE-2026-100587](https://cve.now/CVE-2026-100587.md): OpenClaw before 2026.7.1 Authorization Bypass via Codex Install (CVSS 8.7)
- [CVE-2026-100586](https://cve.now/CVE-2026-100586.md): OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind (CVSS 8.7)
- [CVE-2026-100585](https://cve.now/CVE-2026-100585.md): OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel (CVSS 8.6)
- [CVE-2026-100584](https://cve.now/CVE-2026-100584.md): OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows (CVSS 5.4)
- [CVE-2026-100583](https://cve.now/CVE-2026-100583.md): OpenClaw Discord before 2026.7.1 Authorization Bypass (CVSS 5.3)
- [CVE-2026-100582](https://cve.now/CVE-2026-100582.md): OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass (CVSS 7.1)
- [CVE-2026-100581](https://cve.now/CVE-2026-100581.md): OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension (CVSS 6.8)
- [CVE-2026-100580](https://cve.now/CVE-2026-100580.md): OpenClaw before 2026.7.1 Remote Code Execution via cron tool (CVSS 8.7)
- [CVE-2026-100579](https://cve.now/CVE-2026-100579.md): OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester (CVSS 7.2)
- [CVE-2026-100578](https://cve.now/CVE-2026-100578.md): OpenClaw before 2026.7.1 Authorization Bypass via chat.send (CVSS 7.2)
- [CVE-2026-100577](https://cve.now/CVE-2026-100577.md): OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset (CVSS 5.3)
- [CVE-2026-100576](https://cve.now/CVE-2026-100576.md): OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates (CVSS 5.3)
- [CVE-2026-100575](https://cve.now/CVE-2026-100575.md): OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM (CVSS 8.7)
- [CVE-2026-100574](https://cve.now/CVE-2026-100574.md): OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS (CVSS 8.2)
- [CVE-2026-100573](https://cve.now/CVE-2026-100573.md): OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback (CVSS 4.8)
- [CVE-2026-100572](https://cve.now/CVE-2026-100572.md): OpenClaw before 2026.8.1 Denial of Service via Rate Limit (CVSS 6.9)
- [CVE-2026-100571](https://cve.now/CVE-2026-100571.md): OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass (CVSS 6.9)
- [CVE-2026-100570](https://cve.now/CVE-2026-100570.md): OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK\_PYTHON\_ARGS (CVSS 8.5)
- [CVE-2026-100569](https://cve.now/CVE-2026-100569.md): OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override (CVSS 6.8)
- [CVE-2026-100568](https://cve.now/CVE-2026-100568.md): OpenClaw before 2026.8.1 Unauthorized Command Job Access (CVSS 8.7)
- [CVE-2026-100567](https://cve.now/CVE-2026-100567.md): OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname (CVSS 8.9)
- [CVE-2026-100566](https://cve.now/CVE-2026-100566.md): OpenClaw LINE before 2026.8.1 Access Control Inheritance (CVSS 6.9)
- [CVE-2026-100564](https://cve.now/CVE-2026-100564.md): OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export (CVSS 5.3)
- [CVE-2026-100563](https://cve.now/CVE-2026-100563.md): OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels (CVSS 5.3)
- [CVE-2026-100562](https://cve.now/CVE-2026-100562.md): OpenClaw before 2026.8.1 Authorization Bypass via sessions.create (CVSS 5.3)
- [CVE-2026-100561](https://cve.now/CVE-2026-100561.md): OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper (CVSS 8.6)
- [CVE-2026-100560](https://cve.now/CVE-2026-100560.md): OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass (CVSS 7.7)
- [CVE-2026-100559](https://cve.now/CVE-2026-100559.md): OpenClaw before 2026.8.1 Command Injection via Escaped Newlines (CVSS 8.6)
- [CVE-2026-100558](https://cve.now/CVE-2026-100558.md): OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade (CVSS 8.7)
- [CVE-2026-100557](https://cve.now/CVE-2026-100557.md): OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch (CVSS 8.7)
- [CVE-2026-100556](https://cve.now/CVE-2026-100556.md): OpenClaw before 2026.8.1 Authentication Bypass via Session Reset (CVSS 5.3)
- [CVE-2026-100555](https://cve.now/CVE-2026-100555.md): OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery (CVSS 7.1)
- [CVE-2026-100554](https://cve.now/CVE-2026-100554.md): OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass (CVSS 2.3)
- [CVE-2026-100553](https://cve.now/CVE-2026-100553.md): OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin (CVSS 5.3)
- [CVE-2026-100552](https://cve.now/CVE-2026-100552.md): OpenClaw before 2026.8.1 Policy Bypass via Native Tools (CVSS 8.7)
- [CVE-2026-100551](https://cve.now/CVE-2026-100551.md): OpenClaw iOS Control UI TLS Pin Enforcement Bypass (CVSS 9.0)
- [CVE-2026-100550](https://cve.now/CVE-2026-100550.md): OpenClaw before 2026.8.1 Authentication Bypass via Access Group (CVSS 5.3)
- [CVE-2026-100549](https://cve.now/CVE-2026-100549.md): OpenClaw before 2026.8.1 Path Traversal via QQBot voice filenames (CVSS 5.3)
- [CVE-2026-100548](https://cve.now/CVE-2026-100548.md): OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback (CVSS 6.0)
- [CVE-2026-100547](https://cve.now/CVE-2026-100547.md): OpenClaw before 2026.8.1 Authentication Bypass via File URL (CVSS 6.8)
- [CVE-2026-100546](https://cve.now/CVE-2026-100546.md): OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript (CVSS 6.1)
- [CVE-2026-100545](https://cve.now/CVE-2026-100545.md): OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation (CVSS 6.0)
- [CVE-2026-100544](https://cve.now/CVE-2026-100544.md): openclaw voice-call before 2026.8.1 Authorization Bypass (CVSS 8.7)
- [CVE-2026-100543](https://cve.now/CVE-2026-100543.md): OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash (CVSS 7.7)
- [CVE-2026-100542](https://cve.now/CVE-2026-100542.md): OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2 (CVSS 2.3)
- [CVE-2026-100541](https://cve.now/CVE-2026-100541.md): OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Folding (CVSS 7.7)
- [CVE-2026-100540](https://cve.now/CVE-2026-100540.md): OpenClaw Feishu before 2026.8.1 Authentication Bypass via Disabled Account (CVSS 7.6)
- [CVE-2026-100539](https://cve.now/CVE-2026-100539.md): OpenClaw before 2026.8.1 Memory Access Control Bypass (CVSS 2.1)
- [CVE-2026-100538](https://cve.now/CVE-2026-100538.md): OpenClaw before 2026.8.1 Local File Read via Outbound Attachments (CVSS 7.1)
- [CVE-2026-100537](https://cve.now/CVE-2026-100537.md): OpenClaw before 2026.8.1 Authentication Bypass via Active Memory (CVSS 2.3)
- [CVE-2026-100536](https://cve.now/CVE-2026-100536.md): OpenClaw before 2026.8.1 Path Traversal via Structured Attachments (CVSS 7.1)
- [CVE-2026-100535](https://cve.now/CVE-2026-100535.md): OpenClaw before 2026.8.1 Privilege Escalation via Session Memory (CVSS 7.7)
- [CVE-2026-100534](https://cve.now/CVE-2026-100534.md): OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass (CVSS 2.3)
- [CVE-2026-100533](https://cve.now/CVE-2026-100533.md): OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback (CVSS 6.0)
- [CVE-2026-100532](https://cve.now/CVE-2026-100532.md): openclaw WhatsApp before 2026.8.1 Authentication Bypass (CVSS 7.2)
- [CVE-2026-100531](https://cve.now/CVE-2026-100531.md): openclaw Slack before 2026.8.1 Authorization Bypass (CVSS 7.1)
- [CVE-2026-100530](https://cve.now/CVE-2026-100530.md): OpenClaw before 2026.8.1 Exec Approval Directory Binding (CVSS 8.5)
- [CVE-2026-100529](https://cve.now/CVE-2026-100529.md): OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer (CVSS 7.4)
- [CVE-2026-100528](https://cve.now/CVE-2026-100528.md): OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint (CVSS 5.9)
- [CVE-2026-100527](https://cve.now/CVE-2026-100527.md): OpenClaw before 2026.8.2 Denial of Service via Browser Relay (CVSS 6.9)
- [CVE-2026-100526](https://cve.now/CVE-2026-100526.md): Vulnerability in discord (CVSS 6.0)
- [CVE-2026-100525](https://cve.now/CVE-2026-100525.md): OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass (CVSS 5.3)
- [CVE-2026-95815](https://cve.now/CVE-2026-95815.md): OpenClaw iOS before 2026.8.11 Credential Exposure via Deep-Link URL Logging (CVSS 7.2)
- [CVE-2026-91836](https://cve.now/CVE-2026-91836.md): OpenClaw ClawScan Static Scanner static\_scanner.go incomplete comparison with missing factors (CVSS 2.4)
- [CVE-2026-91835](https://cve.now/CVE-2026-91835.md): OpenClaw ClawScan File Classifier static\_scanner.go IsBinaryFile interpretation conflict (CVSS 2.4)
- [CVE-2026-62229](https://cve.now/CVE-2026-62229.md): OpenClaw \< 2026.5.18 Authorization Bypass via Glob Matching (CVSS 7.7)
- [CVE-2026-62228](https://cve.now/CVE-2026-62228.md): OpenClaw \< 2026.6.5 Authorization Bypass via Node Exec Approvals (CVSS 7.7)
- [CVE-2026-62227](https://cve.now/CVE-2026-62227.md): OpenClaw 2026.4.14 \< 2026.5.26 SSRF via Browser Snapshot (CVSS 4.9)
- [CVE-2026-62226](https://cve.now/CVE-2026-62226.md): OpenClaw 2026.3.28 \< 2026.5.19 Authorization Bypass via Browser Act Route (CVSS 5.1)
- [CVE-2026-62225](https://cve.now/CVE-2026-62225.md): OpenClaw \< 2026.5.18 Authorization Bypass via Skill Command Dispatch (CVSS 2.3)
- [CVE-2026-62224](https://cve.now/CVE-2026-62224.md): OpenClaw MS Teams \< 2026.5.12 Authorization Bypass (CVSS 2.3)
- [CVE-2026-62223](https://cve.now/CVE-2026-62223.md): OpenClaw \< 2026.5.18 Authorization Bypass via Device-pair (CVSS 7.7)
- [CVE-2026-62222](https://cve.now/CVE-2026-62222.md): OpenClaw \< 2026.5.22 Untrusted Plugin Loading via Setup-mode (CVSS 7.1)
- [CVE-2026-62221](https://cve.now/CVE-2026-62221.md): OpenClaw 2026.5.12 \< 2026.5.26 Authorization Bypass via allowFrom (CVSS 2.3)
- [CVE-2026-62220](https://cve.now/CVE-2026-62220.md): OpenClaw 2026.2.25 \< 2026.5.26 WebSocket Rate Limit Bypass (CVSS 6.3)
- [CVE-2026-62219](https://cve.now/CVE-2026-62219.md): OpenClaw 2026.2.12 \< 2026.5.26 Authorization Bypass via Blank Agent IDs (CVSS 6.0)
- [CVE-2026-62218](https://cve.now/CVE-2026-62218.md): OpenClaw 2026.1.20 \< 2026.5.27 Authorization Bypass via device.pair.approve (CVSS 8.7)
- [CVE-2026-62217](https://cve.now/CVE-2026-62217.md): OpenClaw 2026.5.14-beta.1 \< 2026.5.27 Authentication Bypass via exec approvals (CVSS 7.7)
- [CVE-2026-62216](https://cve.now/CVE-2026-62216.md): OpenClaw 2026.4.20 \< 2026.5.28 Policy Bypass via Media Upload (CVSS 2.3)
- [CVE-2026-62215](https://cve.now/CVE-2026-62215.md): OpenClaw \< 2026.6.5 Authentication Bypass via HTTP Canvas (CVSS 5.1)
- [CVE-2026-62214](https://cve.now/CVE-2026-62214.md): OpenClaw \< 2026.5.28 Bot Framework SSRF via serviceUrl Parameter Validation (CVSS 6.0)
- [CVE-2026-62213](https://cve.now/CVE-2026-62213.md): OpenClaw \< 2026.5.27 Token Leakage via MS Teams Outbound Requests (CVSS 6.0)
- [CVE-2026-62212](https://cve.now/CVE-2026-62212.md): OpenClaw \< 2026.5.28 Authentication Bypass via safeFetch (CVSS 5.1)
- [CVE-2026-62211](https://cve.now/CVE-2026-62211.md): OpenClaw \< 2026.6.1 Credential Redaction Bypass via Trajectory Export (CVSS 4.1)
- [CVE-2026-62210](https://cve.now/CVE-2026-62210.md): OpenClaw \< 2026.6.1 Denial of Service via Remote Media URLs (CVSS 6.0)
- [CVE-2026-62209](https://cve.now/CVE-2026-62209.md): OpenClaw 2026.5.10-beta.1 \< 2026.6.5 Authorization Bypass via agent-mode dispatch (CVSS 7.6)
- [CVE-2026-62208](https://cve.now/CVE-2026-62208.md): OpenClaw \< 2026.6.5 Authorization Header Forwarding via SSE (CVSS 6.0)
- [CVE-2026-62207](https://cve.now/CVE-2026-62207.md): OpenClaw \< 2026.6.5 Authentication Bypass via Admin Tools (CVSS 7.7)
- [CVE-2026-62206](https://cve.now/CVE-2026-62206.md): OpenClaw \< 2026.6.9 Authentication Bypass via Moderation Actions (CVSS 6.0)
- [CVE-2026-62205](https://cve.now/CVE-2026-62205.md): OpenClaw 2026.4.12-beta.1 \< 2026.6.6 Authorization Bypass via message actions (CVSS 6.0)
- [CVE-2026-62203](https://cve.now/CVE-2026-62203.md): OpenClaw \< 2026.6.6 Environment Variable Injection via rustup (CVSS 7.7)
- [CVE-2026-62202](https://cve.now/CVE-2026-62202.md): OpenClaw 2026.6.1 \< 2026.6.9 Privilege Escalation via Cron (CVSS 7.7)
- [CVE-2026-62201](https://cve.now/CVE-2026-62201.md): OpenClaw \< 2026.6.6 Network Policy Bypass via exec-server (CVSS 4.9)
- [CVE-2026-62200](https://cve.now/CVE-2026-62200.md): OpenClaw \< 2026.6.6 Authentication Bypass via Git ext transport (CVSS 8.7)
- [CVE-2026-62199](https://cve.now/CVE-2026-62199.md): OpenClaw \< 2026.6.6 Authentication Bypass via Environment Filtering (CVSS 8.7)
- [CVE-2026-62198](https://cve.now/CVE-2026-62198.md): OpenClaw 2026.5.28 \< 2026.6.6 Authorization Bypass via Web Search (CVSS 5.3)
- [CVE-2026-62197](https://cve.now/CVE-2026-62197.md): OpenClaw \< 2026.6.6 Policy Bypass via CDP Discovery (CVSS 6.3)
- [CVE-2026-62196](https://cve.now/CVE-2026-62196.md): OpenClaw 2026.3.22 \< 2026.6.6 Authorization Bypass via WhatsApp Group IDs (CVSS 8.7)
- [CVE-2026-62195](https://cve.now/CVE-2026-62195.md): OpenClaw 2026.5.20 \< 2026.6.6 Authorization Bypass via MCP loopback (CVSS 8.7)
- [CVE-2026-62194](https://cve.now/CVE-2026-62194.md): OpenClaw 2026.5.20 \< 2026.6.9 Privilege Escalation via Plugin Install (CVSS 8.7)
- [CVE-2026-62193](https://cve.now/CVE-2026-62193.md): OpenClaw 2026.6.5 \< 2026.6.9 Authentication Bypass via Plugin Install (CVSS 6.9)
- [CVE-2026-62192](https://cve.now/CVE-2026-62192.md): OpenClaw 2026.6.6 \< 2026.6.9 Authorization Bypass (CVSS 7.2)
- [CVE-2026-62191](https://cve.now/CVE-2026-62191.md): OpenClaw 2026.6.6 \< 2026.6.9 Authorization Bypass via Message Mutations (CVSS 7.1)
- [CVE-2026-62190](https://cve.now/CVE-2026-62190.md): OpenClaw \< 2026.6.9 Authorization Bypass via flock wrapper (CVSS 8.7)
- [CVE-2026-62189](https://cve.now/CVE-2026-62189.md): OpenClaw \< 2026.6.9 Symlink Following via Mirror Sync (CVSS 7.6)
- [CVE-2026-62188](https://cve.now/CVE-2026-62188.md): OpenClaw \< 2026.6.9 Feishu Authorization Bypass (CVSS 8.6)
- [CVE-2026-62187](https://cve.now/CVE-2026-62187.md): OpenClaw \< 2026.6.9 Feishu tools Authorization Bypass (CVSS 8.6)
- [CVE-2026-62186](https://cve.now/CVE-2026-62186.md): OpenClaw \< 2026.6.8 Authorization Bypass via HTTP Model Override (CVSS 7.2)
- [CVE-2026-59261](https://cve.now/CVE-2026-59261.md): OpenClaw \< 2026.5.28 - Credential Override via Workspace Dotenv Files (CVSS 8.4)
- [CVE-2026-53866](https://cve.now/CVE-2026-53866.md): OpenClaw \< 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing (CVSS 7.6)
- [CVE-2026-53865](https://cve.now/CVE-2026-53865.md): OpenClaw \< 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH (CVSS 7.2)
- [CVE-2026-53864](https://cve.now/CVE-2026-53864.md): OpenClaw \< 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control Variables (CVSS 7.6)
- [CVE-2026-53863](https://cve.now/CVE-2026-53863.md): OpenClaw \< 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy (CVSS 6.0)
- [CVE-2026-53862](https://cve.now/CVE-2026-53862.md): OpenClaw \< 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening (CVSS 2.3)
- [CVE-2026-53861](https://cve.now/CVE-2026-53861.md): OpenClaw \< 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS (CVSS 5.3)
- [CVE-2026-53860](https://cve.now/CVE-2026-53860.md): OpenClaw \< 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles (CVSS 2.3)
- [CVE-2026-53859](https://cve.now/CVE-2026-53859.md): OpenClaw \< 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency (CVSS 6.0)
- [CVE-2026-53858](https://cve.now/CVE-2026-53858.md): OpenClaw \< 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE\_DIRECTORY Environment Variable (CVSS 7.0)
- [CVE-2026-53857](https://cve.now/CVE-2026-53857.md): OpenClaw \< 2026.5.3 - Mutable Display Name Binding in Zalo allowFrom Policy (CVSS 8.6)
- [CVE-2026-53856](https://cve.now/CVE-2026-53856.md): OpenClaw 2026.4.23 \< 2026.4.24 - Insecure File Permissions in Config Recovery via OpenClaw.json (CVSS 5.7)
- [CVE-2026-53855](https://cve.now/CVE-2026-53855.md): OpenClaw \< 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks (CVSS 7.6)
- [CVE-2026-53854](https://cve.now/CVE-2026-53854.md): OpenClaw \< 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands (CVSS 6.0)
- [CVE-2026-53853](https://cve.now/CVE-2026-53853.md): OpenClaw \< 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS (CVSS 7.6)
- [CVE-2026-53852](https://cve.now/CVE-2026-53852.md): OpenClaw \< 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairing (CVSS 2.3)
- [CVE-2026-53851](https://cve.now/CVE-2026-53851.md): OpenClaw \< 2026.5.12 - Slack Reaction Event Notification Bypass (CVSS 6.3)
- [CVE-2026-53850](https://cve.now/CVE-2026-53850.md): OpenClaw \< 2026.4.25 - Control Scope Enforcement Bypass in Focus Command (CVSS 6.8)
- [CVE-2026-53849](https://cve.now/CVE-2026-53849.md): OpenClaw \< 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom (CVSS 8.6)
- [CVE-2026-53848](https://cve.now/CVE-2026-53848.md): OpenClaw \< 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers (CVSS 2.3)
- [CVE-2026-53847](https://cve.now/CVE-2026-53847.md): OpenClaw \< 2026.5.6 - Privilege Escalation via Active Memory Write Scope (CVSS 5.3)
- [CVE-2026-53846](https://cve.now/CVE-2026-53846.md): OpenClaw \< 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm\_execpath (CVSS 7.0)
- [CVE-2026-53845](https://cve.now/CVE-2026-53845.md): OpenClaw \< 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping (CVSS 2.3)
- [CVE-2026-53844](https://cve.now/CVE-2026-53844.md): OpenClaw \< 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search (CVSS 6.0)
- [CVE-2026-53843](https://cve.now/CVE-2026-53843.md): OpenClaw \< 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session (CVSS 8.7)
- [CVE-2026-53842](https://cve.now/CVE-2026-53842.md): OpenClaw \< 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK\_PYTHON Environment Variable (CVSS 7.0)
- [CVE-2026-53841](https://cve.now/CVE-2026-53841.md): OpenClaw \< 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML (CVSS 2.1)
- [CVE-2026-53840](https://cve.now/CVE-2026-53840.md): OpenClaw \< 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects (CVSS 6.0)
- [CVE-2026-53839](https://cve.now/CVE-2026-53839.md): OpenClaw \< 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation (CVSS 6.0)
- [CVE-2026-53838](https://cve.now/CVE-2026-53838.md): OpenClaw \< 2026.5.27 - Node Pairing State Mutation via Reconnection (CVSS 6.0)
- [CVE-2026-53837](https://cve.now/CVE-2026-53837.md): OpenClaw \< 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers (CVSS 6.3)
- [CVE-2026-53836](https://cve.now/CVE-2026-53836.md): OpenClaw \< 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases (CVSS 8.7)
- [CVE-2026-53835](https://cve.now/CVE-2026-53835.md): OpenClaw \< 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings (CVSS 2.3)
- [CVE-2026-53834](https://cve.now/CVE-2026-53834.md): OpenClaw \< 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands (CVSS 8.2)
- [CVE-2026-53833](https://cve.now/CVE-2026-53833.md): QQBot for OpenClaw \< 2026.4.29 - Authorization Bypass via QQBot Streaming Command (CVSS 7.4)
- [CVE-2026-53832](https://cve.now/CVE-2026-53832.md): OpenClaw \< 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration (CVSS 7.4)
- [CVE-2026-53831](https://cve.now/CVE-2026-53831.md): OpenClaw \< 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist (CVSS 7.6)
- [CVE-2026-53830](https://cve.now/CVE-2026-53830.md): OpenClaw \< 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload (CVSS 6.0)
- [CVE-2026-53829](https://cve.now/CVE-2026-53829.md): OpenClaw \< 2026.5.18 - Command Truncation in Exec Approval Display (CVSS 8.5)
- [CVE-2026-53828](https://cve.now/CVE-2026-53828.md): OpenClaw \< 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement (CVSS 7.7)
- [CVE-2026-53827](https://cve.now/CVE-2026-53827.md): OpenClaw \< 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding (CVSS 6.0)
- [CVE-2026-53826](https://cve.now/CVE-2026-53826.md): OpenClaw \< 2026.4.26 - Information Disclosure via Sandboxed Session Spawn (CVSS 2.3)
- [CVE-2026-53825](https://cve.now/CVE-2026-53825.md): OpenClaw \< 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope (CVSS 7.1)
- [CVE-2026-53824](https://cve.now/CVE-2026-53824.md): Mattermost plugin for OpenClaw \< 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay (CVSS 6.0)
- [CVE-2026-53823](https://cve.now/CVE-2026-53823.md): OpenClaw \< 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom (CVSS 8.6)
- [CVE-2026-53822](https://cve.now/CVE-2026-53822.md): OpenClaw \< 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution (CVSS 8.7)
- [CVE-2026-53821](https://cve.now/CVE-2026-53821.md): OpenClaw \< 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket (CVSS 8.7)
- [CVE-2026-53820](https://cve.now/CVE-2026-53820.md): OpenClaw \< 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn (CVSS 6.9)
- [CVE-2026-53819](https://cve.now/CVE-2026-53819.md): OpenClaw \< 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override (CVSS 8.7)
- [CVE-2026-53818](https://cve.now/CVE-2026-53818.md): OpenClaw \< 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback (CVSS 6.9)
- [CVE-2026-53817](https://cve.now/CVE-2026-53817.md): OpenClaw \< 2026.5.22 - Control UI Locality Spoofing in Device Pairing (CVSS 8.7)
- [CVE-2026-53816](https://cve.now/CVE-2026-53816.md): OpenClaw \< 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node (CVSS 8.6)
- [CVE-2026-53815](https://cve.now/CVE-2026-53815.md): OpenClaw \< 2026.5.19 - Channel Allowlist Bypass in Message Read Actions (CVSS 7.1)
- [CVE-2026-53814](https://cve.now/CVE-2026-53814.md): OpenClaw \< 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority (CVSS 8.7)
- [CVE-2026-53813](https://cve.now/CVE-2026-53813.md): OpenClaw \< 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution (CVSS 7.3)
- [CVE-2026-53812](https://cve.now/CVE-2026-53812.md): OpenClaw \< 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions (CVSS 4.9)
- [CVE-2026-53811](https://cve.now/CVE-2026-53811.md): OpenClaw \< 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom (CVSS 7.7)
- [CVE-2026-53810](https://cve.now/CVE-2026-53810.md): OpenClaw \< 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata (CVSS 7.7)
- [CVE-2026-53809](https://cve.now/CVE-2026-53809.md): OpenClaw \< 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy (CVSS 4.8)
- [CVE-2026-53808](https://cve.now/CVE-2026-53808.md): OpenClaw \< 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow (CVSS 6.0)
- [CVE-2026-53807](https://cve.now/CVE-2026-53807.md): OpenClaw \< 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom (CVSS 7.7)
- [CVE-2026-53806](https://cve.now/CVE-2026-53806.md): OpenClaw \< 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation (CVSS 7.7)
- [CVE-2026-35674](https://cve.now/CVE-2026-35674.md): OpenClaw \< 2026.5.18 - Scope Bypass via Inherited chat.send Route (CVSS 8.8)
- [CVE-2026-35673](https://cve.now/CVE-2026-35673.md): OpenClaw \< 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routes (CVSS 6.5)
- [CVE-2026-35630](https://cve.now/CVE-2026-35630.md): OpenClaw \< 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttons (CVSS 8.0)
- [CVE-2026-34507](https://cve.now/CVE-2026-34507.md): OpenClaw \< 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checks (CVSS 2.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/openclaw
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.