Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-26323OpenClaw has a command injection in maintainer clawtributors updater
- CVE-2026-26322OpenClaw Gateway tool allowed unrestricted gatewayUrl override
- CVE-2026-26321OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension
- CVE-2026-26320OpenClaw macOS deep link confirmation truncation can conceal executed agent message
- CVE-2026-26319OpenClaw has Missing Webhook Authentication in Telnyx Provider Allowing Unauthenticated Requests
- CVE-2026-26317OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints
- CVE-2026-26316OpenClaw has BlueBubbles webhook auth bypass via loopback proxy trust
- CVE-2026-25474OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypass
- CVE-2026-25593OpenClaw Affected by Unauthenticated Local RCE via WebSocket config.apply
- CVE-2026-25157OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand
- CVE-2026-25475OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction
- CVE-2026-25253OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket conne