Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-32915OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface
- CVE-2026-32914OpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints
- CVE-2026-32846OpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read
- CVE-2026-32913OpenClaw < 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin Redirects
- CVE-2026-27646OpenClaw < 2026.3.7 - Sandbox Escape via /acp spawn Command
- CVE-2026-27183OpenClaw < 2026.3.7 - Shell Approval Gating Bypass via Dispatch Wrapper Depth Mismatch
- CVE-2026-32899OpenClaw < 2026.2.25 - Sender Policy Bypass in Slack Reaction and Pin Event Handlers
- CVE-2026-32898OpenClaw < 2026.2.23 - ACP Permission Auto-Approval Bypass via Untrusted Tool Metadata
- CVE-2026-32897OpenClaw < 2026.2.22 - Authentication Token Reuse in Owner ID Prompt Hashing Fallback
- CVE-2026-32896OpenClaw < 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles Plugin
- CVE-2026-32895OpenClaw < 2026.2.26 - Sender Authorization Bypass in Slack System Event Handlers
- CVE-2026-32067OpenClaw < 2026.2.26 - Cross-Account Authorization Bypass in DM Pairing Store
- CVE-2026-32065OpenClaw < 2026.2.25 - Approval Identity Mismatch in system.run Command Execution
- CVE-2026-32064OpenClaw < 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC Observer
- CVE-2026-32058OpenClaw < 2026.2.26 - Approval Context-Binding Weakness in system.run via host=node
- CVE-2026-32057OpenClaw < 2026.2.25 - Authentication Bypass via Control UI client.id Parameter
- CVE-2026-32056OpenClaw < 2026.2.22 - Remote Code Execution via Shell Startup Environment Variable Injection in system.run
- CVE-2026-32055OpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink
- CVE-2026-32054OpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling
- CVE-2026-32053OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization
- CVE-2026-32052OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers
- CVE-2026-32051OpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access
- CVE-2026-32050OpenClaw < 2026.2.25 - Unauthorized Reaction Status Event Enqueue via Access Check Bypass
- CVE-2026-32049OpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass
- CVE-2026-32048OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
- CVE-2026-32046OpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flag
- CVE-2026-32045OpenClaw < 2026.2.21 - Authentication Bypass in HTTP Gateway Routes via Tokenless Tailscale Auth
- CVE-2026-32044OpenClaw < 2026.3.2 - Tar Archive Safety Bypass in Skills Installation
- CVE-2026-32043OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter
- CVE-2026-32042OpenClaw < 2026.2.25 - Privilege Escalation via Unpaired Device Identity in Shared Gateway Authentication