Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-28450OpenClaw < 2026.2.12 - Unauthenticated Profile Tampering via Nostr Plugin HTTP Endpoints
- CVE-2026-28448OpenClaw 2026.1.29 < 2026.2.1 - Authorization Bypass in Twitch Plugin allowFrom Access Control
- CVE-2026-28447OpenClaw 2026.1.29-beta.1 < 2026.2.1 - Path Traversal in Plugin Installation via Package Name
- CVE-2026-28446OpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching
- CVE-2026-28395OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl
- CVE-2026-28394OpenClaw < 2026.2.15 - Denial of Service via Unbounded Response Parsing in web_fetch Tool
- CVE-2026-28393OpenClaw 2.0.0-beta3 < 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversal
- CVE-2026-28392OpenClaw < 2026.2.14 - Privilege Escalation in Slack Slash Command Handler via Direct Messages
- CVE-2026-28391OpenClaw < 2026.2.2 - Command Injection via cmd.exe Parsing Bypass in Allowlist Enforcement
- CVE-2026-28363In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compres
- CVE-2026-27576OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs
- CVE-2026-27488OpenClaw hardened cron webhook delivery against SSRF
- CVE-2026-27487OpenClaw: Prevent shell injection in macOS keychain credential write
- CVE-2026-27486OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup
- CVE-2026-27485OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection
- CVE-2026-27484OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows
- CVE-2026-27009OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection
- CVE-2026-27008OpenClaw hardened the skill download target directory validation
- CVE-2026-27007OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation
- CVE-2026-27004OpenClaw session tool visibility hardening and Telegram webhook secret fallback
- CVE-2026-27003OpenClaw: Telegram bot token exposure via logs
- CVE-2026-27002OpenClaw: Docker container escape via unvalidated bind mount config injection
- CVE-2026-27001OpenClaw: Unsanitized CWD path injection into LLM prompts
- CVE-2026-26972OpenClaw has a Path Traversal in Browser Download Functionality
- CVE-2026-26329OpenClaw has a path traversal in browser upload allows local file read
- CVE-2026-26328OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities
- CVE-2026-26327OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning
- CVE-2026-26326OpenClaw skills.status could leak secrets to operator.read clients
- CVE-2026-26325OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals
- CVE-2026-26324OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)