Clawdbot (Openclaw) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-20. Vendor: Openclaw.

CVEs of Clawdbot

• CVE-2026-26328 - CVSS 6.5 (medium), 2026-02-20: OpenClaw is a personal AI assistant. Prior to version 2026.2.14, under iMessage `groupPolicy=allowlist`, group authorization could be satisfied by sender…
• CVE-2026-26317 - CVSS 7.1 (high), 2026-02-19: OpenClaw is a personal AI assistant. Prior to 2026.2.14, browser-facing localhost mutation routes accepted cross-origin browser requests without explicit…