Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-53821OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket
- CVE-2026-53820OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn
- CVE-2026-53819OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override
- CVE-2026-53818OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback
- CVE-2026-53817OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing
- CVE-2026-53816OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node
- CVE-2026-53815OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions
- CVE-2026-53814OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority
- CVE-2026-53813OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution
- CVE-2026-53812OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions
- CVE-2026-53811OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom
- CVE-2026-53810OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata
- CVE-2026-53809OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy
- CVE-2026-53808OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow
- CVE-2026-53807OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom
- CVE-2026-53806OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation
- CVE-2026-35674OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route
- CVE-2026-35673OpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routes
- CVE-2026-35630OpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttons
- CVE-2026-34507OpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checks
- CVE-2026-32906OpenClaw < 2026.5.12 - Privilege Escalation in Slack Plugin Approvals via Exec Approver Gate
- CVE-2026-32905OpenClaw < 2026.5.4 - Unauthorized Device-Pairing Bootstrap Code Issuance via Chat Command
- CVE-2026-8634Crabbox < v0.12.0 Environment Variable Information Disclosure
- CVE-2026-8629Crabbox < v0.12.0 Privilege Escalation via Agent Ticket Endpoints
- CVE-2026-8621Crabbox < v0.12.0 Authentication Bypass via Header Spoofing
- CVE-2026-45224Crabbox < 0.9.0 Path Traversal via Islo Provider Workspace Resolution
- CVE-2026-45223Crabbox < 0.9.0 Authentication Bypass via Admin Claim Injection
- CVE-2026-45006OpenClaw < 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypass
- CVE-2026-45005OpenClaw < 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotation
- CVE-2026-45004OpenClaw < 2026.4.23 - Arbitrary Code Execution via setup-api.js in Current Working Directory