Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-53851OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass
- CVE-2026-53850OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command
- CVE-2026-53849OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom
- CVE-2026-53848OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers
- CVE-2026-53847OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope
- CVE-2026-53846OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpath
- CVE-2026-53845OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping
- CVE-2026-53844OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search
- CVE-2026-53843OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session
- CVE-2026-53842OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable
- CVE-2026-53841OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML
- CVE-2026-53840OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects
- CVE-2026-53839OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation
- CVE-2026-53838OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection
- CVE-2026-53837OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers
- CVE-2026-53836OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases
- CVE-2026-53835OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings
- CVE-2026-53834OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands
- CVE-2026-53833QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command
- CVE-2026-53832OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration
- CVE-2026-53831OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist
- CVE-2026-53830OpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload
- CVE-2026-53829OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display
- CVE-2026-53828OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement
- CVE-2026-53827OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding
- CVE-2026-53826OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn
- CVE-2026-53825OpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope
- CVE-2026-53824Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay
- CVE-2026-53823OpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom
- CVE-2026-53822OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution