Openclaw - vulnerabilities (CVEs)

680 CVEs in 19 products, 9 in the last 30 days, newest from 2026-10-14.

Products

Openclaw - 647 CVEs
Openclaw Windows Node - 6 CVEs
Clawhub - 5 CVEs
Crabbox - 5 CVEs
Openclaw/feishu - 4 CVEs
Clawscan - 3 CVEs
Msteams - 3 CVEs
Openclaw/voice-call - 3 CVEs
Clawdbot - 2 CVEs
Discord - 2 CVEs
Slack - 2 CVEs
Diagnostics-prometheus - 1 CVEs
Line - 1 CVEs
Matrix - 1 CVEs
Nextcloud-talk - 1 CVEs
Openclawbluebubbles - 1 CVEs
Whatsapp - 1 CVEs
Feishu - 0 CVEs
Voice-call - 0 CVEs

Newest CVEs of Openclaw

CVE-2026-110689 - CVSS 5.3 (medium), 2026-10-14: A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of…
CVE-2026-101884 - CVSS 7.7 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*,…
CVE-2026-101882 - CVSS 8.8 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and…
CVE-2026-101883 - CVSS 5.4 (medium), 2026-09-30: OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation…
CVE-2026-101881 - CVSS 7.1 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows…
CVE-2026-101879 - CVSS 7.1 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or…
CVE-2026-101880 - CVSS 8.8 (high), 2026-09-30: OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser…
CVE-2026-102807 - CVSS 6 (medium), 2026-09-29: OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App…
CVE-2026-102806 - CVSS 6.3 (medium), 2026-09-29: OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation…
CVE-2026-100604 - CVSS 5.4 (medium), 2026-09-26: ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the…
CVE-2026-100602 - CVSS 7.1 (high), 2026-09-26: ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature. A signed-in caller can invoke the…
CVE-2026-100603 - CVSS 8.7 (high), 2026-09-26: ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a…
CVE-2026-100601 - CVSS 6.9 (medium), 2026-09-26: ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public profile preview's image fetching. The…
CVE-2026-100600 - CVSS 6.9 (medium), 2026-09-26: ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identity, so all direct anonymous API…
CVE-2026-100599 - CVSS 8.8 (high), 2026-09-26: OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command…
CVE-2026-100598 - CVSS 7.5 (high), 2026-09-26: OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured…
CVE-2026-100597 - CVSS 8.8 (high), 2026-09-26: OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation…
CVE-2026-100596 - CVSS 8.8 (high), 2026-09-26: OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands.…
CVE-2026-100595 - CVSS 7.1 (high), 2026-09-26: OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to…
CVE-2026-100594 - CVSS 7.1 (high), 2026-09-26: OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request…
CVE-2026-100593 - CVSS 5.4 (medium), 2026-09-26: OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent `/activation` policy changes in group…
CVE-2026-100592 - CVSS 6.3 (medium), 2026-09-26: OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks.…
CVE-2026-100591 - CVSS 6.3 (medium), 2026-09-26: OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized…
CVE-2026-100590 - CVSS 5.3 (medium), 2026-09-26: OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist…
CVE-2026-100589 - CVSS 8.7 (high), 2026-09-26: OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser…
CVE-2026-100588 - CVSS 8.7 (high), 2026-09-26: OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the…
CVE-2026-100587 - CVSS 8.8 (high), 2026-09-26: OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can…
CVE-2026-100586 - CVSS 8.8 (high), 2026-09-26: OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with…
CVE-2026-100585 - CVSS 8.6 (high), 2026-09-26: OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered…
CVE-2026-100583 - CVSS 5.3 (medium), 2026-09-26: OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to…