Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-42432OpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypass
- CVE-2026-42431OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypass
- CVE-2026-42430OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling
- CVE-2026-42429OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication
- CVE-2026-42428OpenClaw < 2026.4.8 - Missing Integrity Verification in Package Downloads
- CVE-2026-42427OpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable Injection
- CVE-2026-42426OpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write Scope
- CVE-2026-42424OpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA Paths
- CVE-2026-42423OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout Fallback
- CVE-2026-42422OpenClaw < 2026.4.8 - Role Bypass in device.token.rotate Function
- CVE-2026-42421OpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token Rotation
- CVE-2026-42420OpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validation
- CVE-2026-41916OpenClaw < 2026.4.8 - Stale Authentication State via Config Reload
- CVE-2026-41915OpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec Environment
- CVE-2026-41914OpenClaw < 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch Paths
- CVE-2026-41913OpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication Attempts
- CVE-2026-41912OpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigation
- CVE-2026-41911OpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_image
- CVE-2026-41910OpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel Writes
- CVE-2026-41408OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypass
- CVE-2026-41407OpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret Comparison
- CVE-2026-41406OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted Messages
- CVE-2026-41405OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing
- CVE-2026-41404OpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy Authentication
- CVE-2026-41403OpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request Misclassification
- CVE-2026-41402OpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypass
- CVE-2026-41400OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-call
- CVE-2026-41399OpenClaw < 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket Upgrades
- CVE-2026-41398OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridge
- CVE-2026-41397OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal