Openclaw vulnerabilities
672 CVEs and advisories name Openclaw as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45003OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files
- CVE-2026-45002OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mapping
- CVE-2026-45001OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Access
- CVE-2026-45000OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation
- CVE-2026-44999OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Events
- CVE-2026-44998OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Tools
- CVE-2026-44997OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions
- CVE-2026-44996OpenClaw < 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embedding
- CVE-2026-44995OpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables
- CVE-2026-44994OpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpoint
- CVE-2026-44993OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions
- CVE-2026-44992OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv
- CVE-2026-44991OpenClaw < 2026.4.21 - Authorization Bypass in Owner-Enforced Commands via Wildcard Channel Senders
- CVE-2026-44118OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Token Header
- CVE-2026-44117OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload
- CVE-2026-44116OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation
- CVE-2026-44115OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist
- CVE-2026-44114OpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv
- CVE-2026-44113OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge
- CVE-2026-44112OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes
- CVE-2026-44111OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get
- CVE-2026-44110OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store
- CVE-2026-44109OpenClaw < 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action Validation
- CVE-2026-43585OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution
- CVE-2026-43584OpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy
- CVE-2026-43583OpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recovery
- CVE-2026-43582OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass
- CVE-2026-43581OpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding
- CVE-2026-43580OpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions
- CVE-2026-43579OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes