Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-22172OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections
- CVE-2026-32041OpenClaw < 2026.3.1 - Unauthenticated Browser Control Access via Failed Auth Bootstrap
- CVE-2026-32040OpenClaw < 2026.2.23 - HTML Injection via Unvalidated Image MIME Type in Data-URL Interpolation
- CVE-2026-32039OpenClaw < 2026.2.22 - Sender Authorization Bypass via Identity Collision in toolsBySender
- CVE-2026-32038OpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter
- CVE-2026-32037OpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling
- CVE-2026-32036OpenClaw < 2026.2.26- Authentication Bypass via Encoded Dot-Segment Traversal in /api/channels
- CVE-2026-32035OpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript Handler
- CVE-2026-32034OpenClaw < 2026.2.21 - Insecure Control UI Authentication over Plaintext HTTP
- CVE-2026-32033OpenClaw < 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary Validation
- CVE-2026-32032OpenClaw < 2026.2.22 - Arbitrary Shell Execution via Unvalidated SHELL Environment Variable
- CVE-2026-32031OpenClaw < 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels Gateway
- CVE-2026-32030OpenClaw < 2026.2.19 - Sensitive File Disclosure via stageSandboxMedia Path Traversal
- CVE-2026-32029OpenClaw < 2026.2.21 - Client IP Spoofing via X-Forwarded-For Header Parsing
- CVE-2026-32028OpenClaw < 2026.2.25 - Missing Authorization Check in Discord DM Reaction Ingress
- CVE-2026-32027OpenClaw < 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group Allowlist
- CVE-2026-32026OpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandbox
- CVE-2026-32025OpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication Bypass
- CVE-2026-32024OpenClaw < 2026.2.22 - Symlink Traversal in Avatar Handling
- CVE-2026-32023OpenClaw < 2026.2.24 - Approval Gating Bypass via Dispatch-Wrapper Depth-Cap Mismatch in system.run
- CVE-2026-32022OpenClaw < 2026.2.21 - Arbitrary File Read via grep -e Flag Policy Bypass
- CVE-2026-32021OpenClaw < 2026.2.22 - Authorization Bypass via Display Name Collision in Feishu allowFrom
- CVE-2026-32020OpenClaw < 2026.2.22 - Arbitrary File Read via Symlink Following in Static File Handler
- CVE-2026-32019OpenClaw < 2026.2.22 - Incomplete IPv4 Special-Use Range Blocking in SSRF Guard
- CVE-2026-32018OpenClaw < 2026.2.19 - Race Condition in Sandbox Registry Write Operations
- CVE-2026-32017OpenClaw < 2026.2.19 - Arbitrary File Write via Short-Option Bypass in exec Allowlist
- CVE-2026-32016OpenClaw < 2026.2.22 - Path Traversal via Basename-Only Allowlist Matching on macOS
- CVE-2026-32015OpenClaw 2026.1.21 < 2026.2.19 - PATH Hijacking Bypass in tools.exec.safeBins Allowlist Validation
- CVE-2026-32014OpenClaw < 2026.2.26 - Node Reconnect Metadata Spoofing via Unsigned Platform Fields
- CVE-2026-32013OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods