Openclaw Windows Node (Openclaw) - vulnerabilities (CVEs)

6 CVEs, 6 in the last 30 days, 1 known versions, newest CVE from 2026-09-30. Vendor: Openclaw.

CVEs of Openclaw Windows Node

• CVE-2026-101884 - CVSS 7.7 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*,…
• CVE-2026-101882 - CVSS 8.8 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and…
• CVE-2026-101883 - CVSS 5.4 (medium), 2026-09-30: OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation…
• CVE-2026-101881 - CVSS 7.1 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows…
• CVE-2026-101879 - CVSS 7.1 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or…
• CVE-2026-101880 - CVSS 8.8 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser…