Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-91835OpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflict
- CVE-2026-62229OpenClaw < 2026.5.18 Authorization Bypass via Glob Matching
- CVE-2026-62228OpenClaw < 2026.6.5 Authorization Bypass via Node Exec Approvals
- CVE-2026-62227OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshot
- CVE-2026-62226OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route
- CVE-2026-62225OpenClaw < 2026.5.18 Authorization Bypass via Skill Command Dispatch
- CVE-2026-62224OpenClaw MS Teams < 2026.5.12 Authorization Bypass
- CVE-2026-62223OpenClaw < 2026.5.18 Authorization Bypass via Device-pair
- CVE-2026-62222OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode
- CVE-2026-62221OpenClaw 2026.5.12 < 2026.5.26 Authorization Bypass via allowFrom
- CVE-2026-62220OpenClaw 2026.2.25 < 2026.5.26 WebSocket Rate Limit Bypass
- CVE-2026-62219OpenClaw 2026.2.12 < 2026.5.26 Authorization Bypass via Blank Agent IDs
- CVE-2026-62218OpenClaw 2026.1.20 < 2026.5.27 Authorization Bypass via device.pair.approve
- CVE-2026-62217OpenClaw 2026.5.14-beta.1 < 2026.5.27 Authentication Bypass via exec approvals
- CVE-2026-62216OpenClaw 2026.4.20 < 2026.5.28 Policy Bypass via Media Upload
- CVE-2026-62215OpenClaw < 2026.6.5 Authentication Bypass via HTTP Canvas
- CVE-2026-62214OpenClaw < 2026.5.28 Bot Framework SSRF via serviceUrl Parameter Validation
- CVE-2026-62213OpenClaw < 2026.5.27 Token Leakage via MS Teams Outbound Requests
- CVE-2026-62212OpenClaw < 2026.5.28 Authentication Bypass via safeFetch
- CVE-2026-62211OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export
- CVE-2026-62210OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs
- CVE-2026-62209OpenClaw 2026.5.10-beta.1 < 2026.6.5 Authorization Bypass via agent-mode dispatch
- CVE-2026-62208OpenClaw < 2026.6.5 Authorization Header Forwarding via SSE
- CVE-2026-62207OpenClaw < 2026.6.5 Authentication Bypass via Admin Tools
- CVE-2026-62206OpenClaw < 2026.6.9 Authentication Bypass via Moderation Actions
- CVE-2026-62205OpenClaw 2026.4.12-beta.1 < 2026.6.6 Authorization Bypass via message actions
- CVE-2026-62203OpenClaw < 2026.6.6 Environment Variable Injection via rustup
- CVE-2026-62202OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via Cron
- CVE-2026-62201OpenClaw < 2026.6.6 Network Policy Bypass via exec-server
- CVE-2026-62200OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport