Filtered by vendor Openclaw
Subscribe
Total
577 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-40037 | 1 Openclaw | 1 Openclaw | 2026-10-29 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.4.8 contains a request body replay vulnerability in fetchWithSsrFGuard that allows unsafe request bodies to be resent across cross-origin redirects. Attackers can exploit this by triggering redirects to exfiltrate sensitive request data or headers to unintended origins. | |||||
| CVE-2026-35632 | 1 Openclaw | 1 Openclaw | 2026-10-29 | N/A | 7.1 HIGH |
| OpenClaw before 2026.3.24 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files, enabling remote code execution via crontab injection or unauthorized access via SSH key manipulation. | |||||
| CVE-2026-53855 | 1 Openclaw | 1 Openclaw | 2026-10-25 | N/A | 8.1 HIGH |
| OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operators to weaken strict allowlist checks via shell positional parameters. Attackers can combine allowlisted tools with shell positional arguments to place inline-eval content in shell carriers outside intended allowlist rules, enabling execution of unapproved shell-provided content. | |||||
| CVE-2026-53846 | 1 Openclaw | 1 Openclaw | 2026-10-25 | N/A | 7.1 HIGH |
| OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files to override the npm_execpath configuration used for bundled runtime dependency installation. Attackers with workspace access can execute unintended local package-manager executables during dependency setup to compromise the build environment. | |||||
| CVE-2026-53851 | 1 Openclaw | 1 Openclaw | 2026-10-25 | N/A | 5.3 MEDIUM |
| OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications. Attackers can trigger unintended agent processing by sending reaction events when the feature is enabled, potentially leading to unauthorized processing of lower-trust input. | |||||
| CVE-2026-53857 | 1 Openclaw | 1 Openclaw | 2026-10-25 | N/A | 8.1 HIGH |
| OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata could match allowFrom policy entries through display name changes. Attackers with mutable display names could receive agent responses intended for different Zalo identities when the feature is enabled. | |||||
| CVE-2026-59261 | 1 Openclaw | 1 Openclaw | 2026-10-25 | N/A | 7.1 HIGH |
| OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries. | |||||
| CVE-2026-62187 | 1 Openclaw | 1 Openclaw\/feishu | 2026-10-24 | N/A | 8.1 HIGH |
| OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator's configuration and whether lower-trust input can reach the affected feature. | |||||
| CVE-2026-62188 | 1 Openclaw | 1 Openclaw\/feishu | 2026-10-24 | N/A | 8.1 HIGH |
| OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignore per-account disablement settings. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could perform actions that should have required a stronger authorization or policy check. The issue is fixed in version 2026.6.9. | |||||
| CVE-2026-62214 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 6.5 MEDIUM |
| OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters. Attackers can supply malicious serviceUrl values through configured input paths to retrieve sensitive authentication data outside the trusted boundary. | |||||
| CVE-2026-62213 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 6.5 MEDIUM |
| OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that allows lower-trust callers to expose Bot Framework tokens. Attackers can access configured input paths to retrieve credentials that should remain within the trusted boundary. | |||||
| CVE-2026-62198 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 4.3 MEDIUM |
| OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute restricted operations. | |||||
| CVE-2026-62216 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 5.0 MEDIUM |
| OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy (server-side request forgery). The practical impact depends on the operator's configuration and whether lower-trust input can reach that path. | |||||
| CVE-2026-53848 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 4.3 MEDIUM |
| OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wrapper-level side effects outside allowlisted command intent. Attackers can craft command requests that bypass allowlist validation by leveraging transparent command wrappers to perform unintended operations. | |||||
| CVE-2026-62190 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 8.8 HIGH |
| OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or persist actions beyond their intended authorization. Attackers can leverage configured input paths to bypass durable exec approval binding and perform unauthorized operations when the affected feature is enabled. | |||||
| CVE-2026-53852 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 5.4 MEDIUM |
| OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing that allows authenticated operators to restore broader scopes than intended by submitting empty-scope re-pairing requests. Attackers can exploit this by sending re-pairing requests with empty scope sets to skip containment guards and retain unauthorized device access. | |||||
| CVE-2026-62226 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 8.5 HIGH |
| OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks. | |||||
| CVE-2026-62189 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 7.1 HIGH |
| OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authorization. Attackers can exploit remote symlink parents to bypass policy checks and authorization boundaries when the feature is enabled and reachable. | |||||
| CVE-2026-62221 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 5.4 MEDIUM |
| OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFrom feature. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization, including running non-allowlisted commands. | |||||
| CVE-2026-53847 | 1 Openclaw | 1 Openclaw | 2026-10-24 | N/A | 5.4 MEDIUM |
| OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gateway operators with operator.write access to modify global configuration without requiring operator.admin privileges. Attackers with operator.write access can exploit insufficient scope validation to apply unauthorized configuration changes beyond the intended write scope. | |||||