Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-41365OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History
- CVE-2026-41364OpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload
- CVE-2026-41363OpenClaw 2026.2.6 < 2026.3.28 - Arbitrary File Read via Feishu upload_image Parameter
- CVE-2026-41362OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication
- CVE-2026-41361OpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges
- CVE-2026-41360OpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script Binding
- CVE-2026-41359OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence
- CVE-2026-41358OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context
- CVE-2026-41357OpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox Backends
- CVE-2026-41356OpenClaw < 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotate
- CVE-2026-41355OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion
- CVE-2026-41354OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys
- CVE-2026-41353OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection
- CVE-2026-41352OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass
- CVE-2026-41351OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding
- CVE-2026-41350OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations
- CVE-2026-41349OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch
- CVE-2026-41348OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands
- CVE-2026-41347OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints
- CVE-2026-41346OpenClaw 2026.2.26 < 2026.3.31 - Denial of Service via Improper Pending Pairing Request Cap Enforcement
- CVE-2026-41345OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download
- CVE-2026-41344OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter
- CVE-2026-41343OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency
- CVE-2026-41342OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding
- CVE-2026-41341OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord Extension
- CVE-2026-41340OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration
- CVE-2026-41339OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot
- CVE-2026-41338OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations
- CVE-2026-41337OpenClaw < 2026.3.31 - Callback Origin Mutation in Plivo Voice-call Replay
- CVE-2026-41336OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override