Filtered by vendor Openclaw
Subscribe
Total
577 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-33579 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 9.9 CRITICAL |
| OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check. A caller with pairing privileges but without admin privileges can approve pending device requests asking for broader scopes including admin access by exploiting the missing scope validation in extensions/device-pair/index.ts and src/infra/device-pairing.ts. | |||||
| CVE-2026-41371 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 8.5 HIGH |
| OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate target sessions, archive prior transcript state, and force new session IDs without requiring admin scope by exploiting improper authorization checks in the chat.send path. | |||||
| CVE-2026-34425 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 5.4 MEDIUM |
| OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped execution, command substitution, or subshell invocation to bypass the validateScriptFileForShellBleed() validation checks and execute arbitrary script content that would otherwise be blocked. | |||||
| CVE-2026-41370 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths. Remote attackers can bypass attachment-cache and root directory checks to access files outside intended directories. | |||||
| CVE-2026-33578 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 4.3 MEDIUM |
| OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots despite configured allowlist restrictions. | |||||
| CVE-2026-33581 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parameters that bypass localRoots validation. Remote attackers can exploit this by routing file requests through unvalidated alias parameters to access files outside the intended sandbox directory. | |||||
| CVE-2026-41369 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override variables. Attackers can exploit this by injecting malicious environment variables to override critical system configurations and compromise host execution integrity. | |||||
| CVE-2026-41364 | 1 Openclaw | 1 Openclaw | 2026-07-24 | N/A | 8.1 HIGH |
| OpenClaw before 2026.3.31 contains a symlink following vulnerability in SSH sandbox tar upload that allows remote attackers to write arbitrary files. Attackers can exploit this by uploading tar archives containing symlinks to escape the sandbox and overwrite files on the remote host. | |||||
| CVE-2026-62210 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 6.5 MEDIUM |
| OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce availability. | |||||
| CVE-2026-53838 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 9.8 CRITICAL |
| OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval restrictions. | |||||
| CVE-2026-53835 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 4.3 MEDIUM |
| OpenClaw before 2026.5.6 contains a configuration enforcement bypass vulnerability in Feishu dynamic-agent bindings that allows authenticated senders to create or update bindings without honoring configured config-write controls. Attackers can exploit this by leveraging the dynamic-agent binding feature to change sender-agent binding state beyond intended policy, potentially enabling unauthorized binding modifications. | |||||
| CVE-2026-53821 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 8.8 HIGH |
| OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or trusted-proxy authorization baseline. Unpaired or restricted trusted-proxy Control UI clients can obtain cached operator.admin authority on live WebSocket connections to execute admin-gated Gateway RPCs. | |||||
| CVE-2026-53828 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 8.8 HIGH |
| OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. Attackers can trigger native command handling to bypass the configured owner-command access control, potentially executing privileged commands from unauthorized users. | |||||
| CVE-2026-53830 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and Zalo webhook secrets to remain active after secrets.reload. Attackers can exploit the stale-secret window to deliver webhook events after operator-expected secret revocation, potentially accepting previous credentials. | |||||
| CVE-2026-53836 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 8.8 HIGH |
| OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recognized by the allowlist parser. Remote authenticated operators can bypass execution allowlist checks by using unrecognized encoded-command alias forms to execute arbitrary PowerShell content. | |||||
| CVE-2026-53831 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 8.3 HIGH |
| OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data. | |||||
| CVE-2026-53822 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 8.8 HIGH |
| OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls. | |||||
| CVE-2026-53826 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 4.3 MEDIUM |
| OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes the real workspace path to child prompts. Attackers can exploit this by spawning child sessions from sandboxed parents to reveal host workspace location or related memory context to child models. | |||||
| CVE-2026-53837 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 3.7 LOW |
| OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended DM policy decisions by sending crafted Mattermost events missing channel type information to process restricted content. | |||||
| CVE-2026-53820 | 1 Openclaw | 1 Openclaw | 2026-07-23 | N/A | 6.6 MEDIUM |
| OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass intended command restrictions. Attackers can reach the affected bundled MCP session-spawn path to start sessions with broader command reach than intended. | |||||