Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-41335OpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSON
- CVE-2026-41334OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass
- CVE-2026-41333OpenClaw < 2026.3.31 - Authentication Rate Limiting Bypass via Fake DeviceToken
- CVE-2026-41332OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist
- CVE-2026-41909OpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing Actions
- CVE-2026-41908OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Route
- CVE-2026-41331OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription
- CVE-2026-41330OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy
- CVE-2026-41329OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation
- CVE-2026-41303OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands
- CVE-2026-41302OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download
- CVE-2026-41301OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairing State Creation via Signature Verification Bypass
- CVE-2026-41300OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding
- CVE-2026-41299OpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard
- CVE-2026-41298OpenClaw < 2026.4.2 - Authorization Bypass in Session Termination Endpoint
- CVE-2026-41297OpenClaw < 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download Redirect
- CVE-2026-41296OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFile
- CVE-2026-41295OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup
- CVE-2026-41294OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File
- CVE-2026-40045OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints
- CVE-2026-41389OpenClaw 2026.4.7 < 2026.4.15 - Arbitrary File Read via Unvalidated Tool-Result Media Paths
- CVE-2026-3691OpenClaw Client PKCE Verifier Information Disclosure Vulnerability
- CVE-2026-3690OpenClaw Canvas Authentication Bypass Vulnerability
- CVE-2026-3689OpenClaw Canvas Path Traversal Information Disclosure Vulnerability
- CVE-2026-35670OpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat
- CVE-2026-35669OpenClaw < 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scope
- CVE-2026-35668OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters
- CVE-2026-35667OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts
- CVE-2026-35666OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper
- CVE-2026-35665OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing