Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-41396OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root
- CVE-2026-41395OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3
- CVE-2026-41394OpenClaw < 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth Routes
- CVE-2026-41393OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area Discovery
- CVE-2026-41392OpenClaw < 2026.3.31 - Exec Allowlist Bypass via Shell Init-File Options
- CVE-2026-41391OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling
- CVE-2026-41390OpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrapper
- CVE-2026-41388OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling
- CVE-2026-41387OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization
- CVE-2026-41386OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes
- CVE-2026-41385OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass
- CVE-2026-41384OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend
- CVE-2026-41383OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Paths
- CVE-2026-41382OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gaps
- CVE-2026-41381OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist
- CVE-2026-41380OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables
- CVE-2026-41379OpenClaw < 2026.3.28 - Privilege Escalation via chat.send to Admin-Class Talk Voice Config
- CVE-2026-41378OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatch
- CVE-2026-41377OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation
- CVE-2026-41376OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation
- CVE-2026-41375OpenClaw < 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm Endpoints
- CVE-2026-41374OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization
- CVE-2026-41373OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy
- CVE-2026-41372OpenClaw < 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP Discovery
- CVE-2026-41371OpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset Command
- CVE-2026-41370OpenClaw < 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP Dispatch
- CVE-2026-41369OpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution
- CVE-2026-41368OpenClaw < 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypass
- CVE-2026-41367OpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions
- CVE-2026-41366OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting