Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-62229 |
|
Path Traversal in openclaw (CVE-2026-62229)
path traversal in openclaw (CVE-2026-62229). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62227 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62227)
SSRF in openclaw (CVE-2026-62227). Confidential information can be exposed externally.
|
| CVE-2026-62228 |
|
Authorization Flaw in openclaw (CVE-2026-62228)
vulnerability in openclaw (CVE-2026-62228). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62225 |
|
Authorization Flaw in openclaw (CVE-2026-62225)
vulnerability in openclaw (CVE-2026-62225). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62223 |
|
Authorization Flaw in openclaw (CVE-2026-62223)
vulnerability in openclaw (CVE-2026-62223). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62222 |
|
Vulnerability in openclaw (CVE-2026-62222)
vulnerability in openclaw (CVE-2026-62222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62221 |
|
Authorization Flaw in openclaw (CVE-2026-62221)
vulnerability in openclaw (CVE-2026-62221). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62226 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62226)
SSRF in openclaw (CVE-2026-62226). Confidential information can be exposed externally.
|
| CVE-2026-62219 |
|
Authorization Flaw in openclaw (CVE-2026-62219)
vulnerability in openclaw (CVE-2026-62219). Data can be tampered with by attackers.
|
| CVE-2026-62218 |
|
Vulnerability in openclaw (CVE-2026-62218)
vulnerability in openclaw (CVE-2026-62218). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62217 |
|
Authorization Flaw in c (CVE-2026-62217)
vulnerability in c (CVE-2026-62217). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62216 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62216)
SSRF in openclaw (CVE-2026-62216). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62214 |
|
Vulnerability in openclaw (CVE-2026-62214)
vulnerability in openclaw (CVE-2026-62214). Confidential information can be exposed externally.
|
| CVE-2026-62213 |
|
Vulnerability in openclaw (CVE-2026-62213)
vulnerability in openclaw (CVE-2026-62213). Confidential information can be exposed externally.
|
| CVE-2026-62212 |
|
Vulnerability in openclaw (CVE-2026-62212)
vulnerability in openclaw (CVE-2026-62212). Confidential information can be exposed externally.
|
| CVE-2026-62211 |
|
Vulnerability in openclaw (CVE-2026-62211)
vulnerability in openclaw (CVE-2026-62211). Confidential information can be exposed externally.
|
| CVE-2026-62210 |
|
Vulnerability in dos (CVE-2026-62210)
vulnerability in dos (CVE-2026-62210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62209 |
|
Authorization Flaw in openclaw (CVE-2026-62209)
vulnerability in openclaw (CVE-2026-62209). Confidential information can be exposed externally.
|
| CVE-2026-62208 |
|
Vulnerability in openclaw (CVE-2026-62208)
vulnerability in openclaw (CVE-2026-62208). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-62207 |
|
Vulnerability in openclaw (CVE-2026-62207)
vulnerability in openclaw (CVE-2026-62207). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62206 |
|
Vulnerability in openclaw (CVE-2026-62206)
vulnerability in openclaw (CVE-2026-62206). Data can be tampered with by attackers.
|
| CVE-2026-62205 |
|
Vulnerability in openclaw (CVE-2026-62205)
vulnerability in openclaw (CVE-2026-62205). Data can be tampered with by attackers. Mitigation: upgrade to `2026.6.6` or later.
|
| CVE-2026-62203 |
|
Vulnerability in openclaw (CVE-2026-62203)
vulnerability in openclaw (CVE-2026-62203). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62202 |
|
Authorization Flaw in privilege-escalation (CVE-2026-62202)
vulnerability in privilege-escalation (CVE-2026-62202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62201 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62201)
SSRF in openclaw (CVE-2026-62201). Confidential information can be exposed externally.
|
| CVE-2026-62200 |
|
Vulnerability in c (CVE-2026-62200)
vulnerability in c (CVE-2026-62200). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62199 |
|
Vulnerability in openclaw (CVE-2026-62199)
vulnerability in openclaw (CVE-2026-62199). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62198 |
|
Authorization Flaw in openclaw (CVE-2026-62198)
vulnerability in openclaw (CVE-2026-62198). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62197 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62197)
SSRF in openclaw (CVE-2026-62197). Confidential information can be exposed externally.
|
| CVE-2026-62196 |
|
Authorization Flaw in openclaw (CVE-2026-62196)
vulnerability in openclaw (CVE-2026-62196). Confidential information can be exposed externally.
|
| CVE-2026-62195 |
|
Vulnerability in openclaw (CVE-2026-62195)
vulnerability in openclaw (CVE-2026-62195). Confidential information can be exposed externally.
|
| CVE-2026-62189 |
|
Vulnerability in openclaw (CVE-2026-62189)
vulnerability in openclaw (CVE-2026-62189). Confidential information can be exposed externally.
|
| CVE-2026-62190 |
|
Vulnerability in openclaw (CVE-2026-62190)
vulnerability in openclaw (CVE-2026-62190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62191 |
|
Vulnerability in openclaw (CVE-2026-62191)
vulnerability in openclaw (CVE-2026-62191). Data can be tampered with by attackers.
|
| CVE-2026-62193 |
|
Authorization Flaw in openclaw (CVE-2026-62193)
vulnerability in openclaw (CVE-2026-62193). Data can be tampered with by attackers. Mitigation: upgrade to `2026.6.9` or later.
|
| CVE-2026-62194 |
|
Vulnerability in privilege-escalation (CVE-2026-62194)
vulnerability in privilege-escalation (CVE-2026-62194). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62192 |
|
Authorization Flaw in openclaw (CVE-2026-62192)
vulnerability in openclaw (CVE-2026-62192). Data can be tampered with by attackers.
|
| CVE-2026-62188 |
|
Authorization Flaw in openclaw (CVE-2026-62188)
vulnerability in openclaw (CVE-2026-62188). Confidential information can be exposed externally.
|
| CVE-2026-62187 |
|
Authorization Flaw in openclaw (CVE-2026-62187)
vulnerability in openclaw (CVE-2026-62187). Confidential information can be exposed externally.
|
| CVE-2026-62186 |
|
Vulnerability in openclaw (CVE-2026-62186)
vulnerability in openclaw (CVE-2026-62186). Confidential information can be exposed externally.
|
| CVE-2026-59261 |
|
Vulnerability in openclaw (CVE-2026-59261)
vulnerability in openclaw (CVE-2026-59261). Confidential information can be exposed externally.
|
| CVE-2026-53866 |
|
OpenClaw: Shell inline-command parsing could miss an allowlist check
OpenClaw: Shell inline-command parsing could miss an allowlist check
|
| CVE-2026-53865 |
|
Vulnerability in openclaw (CVE-2026-53865)
vulnerability in openclaw (CVE-2026-53865). Confidential information can be exposed externally. Exploitable via ``trash``. Mitigation: upgrade to `2026.5.2` or later.
|
| CVE-2026-53864 |
|
OpenClaw: Host environment sanitizer missed two Node.js control variables
OpenClaw: Host environment sanitizer missed two Node.js control variables
|
| CVE-2026-53861 |
|
Vulnerability in openclaw (CVE-2026-53861)
vulnerability in openclaw (CVE-2026-53861). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.6` or later.
|
| CVE-2026-53856 |
|
Vulnerability in openclaw (CVE-2026-53856)
vulnerability in openclaw (CVE-2026-53856). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.24` or later.
|
| CVE-2026-53857 |
|
OpenClaw: Zalo allowFrom could bind to mutable display names
OpenClaw: Zalo allowFrom could bind to mutable display names
|
| CVE-2026-53858 |
|
Vulnerability in openclaw (CVE-2026-53858)
vulnerability in openclaw (CVE-2026-53858). Confidential information can be exposed externally. Exploitable via ``STATE_DIRECTORY``. Mitigation: upgrade to `2026.5.2` or later.
|
| CVE-2026-53860 |
|
Authorization Flaw in openclaw (CVE-2026-53860)
vulnerability in openclaw (CVE-2026-53860). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.7` or later.
|
| CVE-2026-53859 |
|
Vulnerability in openclaw (CVE-2026-53859)
vulnerability in openclaw (CVE-2026-53859). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.26` or later.
|