Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-28485OpenClaw 2026.1.5 < 2026.2.12 - Missing Authentication in Browser Control HTTP Endpoints
- CVE-2026-28482OpenClaw < 2026.2.12 - Path Traversal via Unsanitized sessionId and sessionFile Parameters
- CVE-2026-28481OpenClaw < 2026.2.1 - Bearer Token Leakage via MS Teams Attachment Downloader Suffix Matching
- CVE-2026-28480OpenClaw < 2026.2.14 - Identity Spoofing via Mutable Username in Telegram Allowlist Authorization
- CVE-2026-28479OpenClaw < 2026.2.15 - Cache Poisoning via Deprecated SHA-1 Hash in Sandbox Configuration
- CVE-2026-28478OpenClaw < 2026.2.13 - Denial of Service via Unbounded Webhook Request Body Buffering
- CVE-2026-28477OpenClaw < 2026.2.14 - OAuth State Validation Bypass in Manual Chutes Login Flow
- CVE-2026-28476OpenClaw < 2026.2.14 - Server-Side Request Forgery in Tlon Extension Authentication
- CVE-2026-28475OpenClaw < 2026.2.13 - Timing Attack via Hook Token Comparison
- CVE-2026-28474OpenClaw Nextcloud Talk < 2026.2.6 - Allowlist Bypass via actor.name Display Name Spoofing
- CVE-2026-28473OpenClaw < 2026.2.2 - Authorization Bypass via /approve Chat Command
- CVE-2026-28472OpenClaw < 2026.2.2 - Device Identity Check Bypass in Gateway WebSocket Connect Handshake
- CVE-2026-28471OpenClaw 2026.1.14-1 < 2026.2.2 - Allowlist Bypass via displayName and Cross-Homeserver localpart Matching in Matrix Plugin
- CVE-2026-28470OpenClaw < 2026.2.2 - Exec Allowlist Bypass via Command Substitution in Double Quotes
- CVE-2026-28469OpenClaw < 2026.2.14 - Cross-Account Policy Context Misrouting via Shared Webhook Path Ambiguity
- CVE-2026-28468OpenClaw 2026.1.29-beta.1 < 2026.2.14 - Authentication Bypass in Sandbox Browser Bridge Server
- CVE-2026-28467OpenClaw < 2026.2.2 - SSRF via Attachment Media URL Hydration
- CVE-2026-28466OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass
- CVE-2026-28465OpenClaw voice-call < 2026.2.3 - Webhook Verification Bypass via Forwarded Headers
- CVE-2026-28464OpenClaw < 2026.2.12 - Timing Attack in Hooks Token Authentication
- CVE-2026-28463OpenClaw < 2026.2.14 - Arbitrary File Read via Shell Expansion in Safe Bins Allowlist
- CVE-2026-28462OpenClaw < 2026.2.13 - Path Traversal in Trace and Download Output Paths
- CVE-2026-28459OpenClaw < 2026.2.12 - Arbitrary File Write via Untrusted sessionFile Path
- CVE-2026-28458OpenClaw 2026.1.20 < 2026.2.1 - Missing Authentication in Browser Relay /cdp WebSocket Endpoint
- CVE-2026-28457OpenClaw < 2026.2.14 - Path Traversal in Sandbox Skill Mirroring via Name Parameter
- CVE-2026-28456OpenClaw 2026.1.5 < 2026.2.14 - Arbitrary Code Execution via Unsafe Hook Module Path Handling
- CVE-2026-28454OpenClaw < 2026.2.2 - Authorization Bypass via Unauthenticated Telegram Webhook
- CVE-2026-28453OpenClaw < 2026.2.14 - Zip Slip Path Traversal in TAR Archive Extraction
- CVE-2026-28452OpenClaw < 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive
- CVE-2026-28451OpenClaw < 2026.2.14 - SSRF via Feishu Extension Media Fetching