Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-33576OpenClaw < 2026.3.28 - Unauthorized Media Download via Zalo Channel
- CVE-2026-34506OpenClaw < 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist Configuration
- CVE-2026-34505OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation
- CVE-2026-32988OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation
- CVE-2026-32982OpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logs
- CVE-2026-32977OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Path
- CVE-2026-32976OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands
- CVE-2026-32971OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands
- CVE-2026-32970OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs
- CVE-2026-32921OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run
- CVE-2026-32920OpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins
- CVE-2026-32917OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP
- CVE-2026-32916OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes
- CVE-2026-33575OpenClaw < 2026.3.12 - Long-lived Credential Exposure in Pairing Setup Codes
- CVE-2026-33574OpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Download
- CVE-2026-33573OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters
- CVE-2026-33572OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files
- CVE-2026-32987OpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device Pairing
- CVE-2026-32980OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Request
- CVE-2026-32979OpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval
- CVE-2026-32978OpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners
- CVE-2026-32975OpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist
- CVE-2026-32974OpenClaw < 2026.3.12 - Forged Event Injection via Feishu Webhook Verification Token
- CVE-2026-32973OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalization
- CVE-2026-32972OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request
- CVE-2026-32924OpenClaw < 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in Feishu
- CVE-2026-32923OpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist Enforcement
- CVE-2026-32922OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate
- CVE-2026-32919OpenClaw < 2026.3.11 - Unauthorized Session Reset via agent Slash Commands
- CVE-2026-32918OpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool