Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-35664OpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks
- CVE-2026-35663OpenClaw < 2026.3.25 - Privilege Escalation via Backend Reconnect Scope Self-Claim
- CVE-2026-35662OpenClaw < 2026.3.22 - Missing controlScope Enforcement in Send Action
- CVE-2026-35661OpenClaw < 2026.3.25 - Telegram DM-Scoped Inline Button Callback Authorization Bypass
- CVE-2026-35660OpenClaw < 2026.3.23 - Insufficient Access Control in Gateway Agent Session Reset
- CVE-2026-35659OpenClaw < 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discovery
- CVE-2026-35658OpenClaw < 2026.3.2 - Filesystem Boundary Bypass in Image Tool
- CVE-2026-35657OpenClaw < 2026.3.25 - Authorization Bypass in HTTP Session History Route
- CVE-2026-35656OpenClaw < 2026.3.22 - XFF Loopback Spoofing Bypass in Canvas Authentication and Rate Limiter
- CVE-2026-35655OpenClaw < 2026.3.22 - Identity Spoofing via rawInput Tool in ACP Permission Resolution
- CVE-2026-35654OpenClaw < 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invoke
- CVE-2026-35653OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request
- CVE-2026-35652OpenClaw < 2026.3.22 - Unauthorized Action Execution via Callback Dispatch
- CVE-2026-35651OpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt
- CVE-2026-35650OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization
- CVE-2026-35649OpenClaw < 2026.3.22 - Settings Reconciliation Bypass via Empty Allowlist
- CVE-2026-35648OpenClaw < 2026.3.22 - Policy Bypass via Unvalidated Queued Node Actions
- CVE-2026-35647OpenClaw < 2026.3.25 - Direct Message Policy Bypass via Verification Notices
- CVE-2026-35643OpenClaw < 2026.3.22 - Arbitrary Code Execution via Unvalidated WebView JavascriptInterface
- CVE-2026-35641OpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation
- CVE-2026-35621OpenClaw < 2026.3.24 - Privilege Escalation via chat.send to Allowlist Persistence
- CVE-2026-35620OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands
- CVE-2026-35619OpenClaw < 2026.3.24 - Authorization Bypass via HTTP /v1/models Endpoint
- CVE-2026-35646OpenClaw < 2026.3.25 - Pre-Authentication Rate-Limit Bypass in Webhook Token Validation
- CVE-2026-35645OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession
- CVE-2026-35644OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots
- CVE-2026-35642OpenClaw < 2026.3.25 - Authorization Bypass in Group Reactions via requireMention Bypass
- CVE-2026-35640OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing
- CVE-2026-35639OpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validation
- CVE-2026-35638OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UI