Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Tag: openclaw Clear
ID Title
CVE-2026-62229 Path Traversal in openclaw (CVE-2026-62229)
path traversal in openclaw (CVE-2026-62229). Successful exploitation can lead to full system takeover.
CVE-2026-62227 SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62227)
SSRF in openclaw (CVE-2026-62227). Confidential information can be exposed externally.
CVE-2026-62228 Authorization Flaw in openclaw (CVE-2026-62228)
vulnerability in openclaw (CVE-2026-62228). Successful exploitation can lead to full system takeover.
CVE-2026-62225 Authorization Flaw in openclaw (CVE-2026-62225)
vulnerability in openclaw (CVE-2026-62225). Risk of unauthorized operations or information disclosure.
CVE-2026-62223 Authorization Flaw in openclaw (CVE-2026-62223)
vulnerability in openclaw (CVE-2026-62223). Successful exploitation can lead to full system takeover.
CVE-2026-62222 Vulnerability in openclaw (CVE-2026-62222)
vulnerability in openclaw (CVE-2026-62222). Successful exploitation can lead to full system takeover.
CVE-2026-62221 Authorization Flaw in openclaw (CVE-2026-62221)
vulnerability in openclaw (CVE-2026-62221). Risk of unauthorized operations or information disclosure.
CVE-2026-62226 SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62226)
SSRF in openclaw (CVE-2026-62226). Confidential information can be exposed externally.
CVE-2026-62219 Authorization Flaw in openclaw (CVE-2026-62219)
vulnerability in openclaw (CVE-2026-62219). Data can be tampered with by attackers.
CVE-2026-62218 Vulnerability in openclaw (CVE-2026-62218)
vulnerability in openclaw (CVE-2026-62218). Successful exploitation can lead to full system takeover.
CVE-2026-62217 Authorization Flaw in c (CVE-2026-62217)
vulnerability in c (CVE-2026-62217). Successful exploitation can lead to full system takeover.
CVE-2026-62216 SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62216)
SSRF in openclaw (CVE-2026-62216). Risk of unauthorized operations or information disclosure.
CVE-2026-62214 Vulnerability in openclaw (CVE-2026-62214)
vulnerability in openclaw (CVE-2026-62214). Confidential information can be exposed externally.
CVE-2026-62213 Vulnerability in openclaw (CVE-2026-62213)
vulnerability in openclaw (CVE-2026-62213). Confidential information can be exposed externally.
CVE-2026-62212 Vulnerability in openclaw (CVE-2026-62212)
vulnerability in openclaw (CVE-2026-62212). Confidential information can be exposed externally.
CVE-2026-62211 Vulnerability in openclaw (CVE-2026-62211)
vulnerability in openclaw (CVE-2026-62211). Confidential information can be exposed externally.
CVE-2026-62210 Vulnerability in dos (CVE-2026-62210)
vulnerability in dos (CVE-2026-62210). Risk of unauthorized operations or information disclosure.
CVE-2026-62209 Authorization Flaw in openclaw (CVE-2026-62209)
vulnerability in openclaw (CVE-2026-62209). Confidential information can be exposed externally.
CVE-2026-62208 Vulnerability in openclaw (CVE-2026-62208)
vulnerability in openclaw (CVE-2026-62208). Confidential information can be exposed externally. Exploitable via `Authorization header`.
CVE-2026-62207 Vulnerability in openclaw (CVE-2026-62207)
vulnerability in openclaw (CVE-2026-62207). Successful exploitation can lead to full system takeover.
CVE-2026-62206 Vulnerability in openclaw (CVE-2026-62206)
vulnerability in openclaw (CVE-2026-62206). Data can be tampered with by attackers.
CVE-2026-62205 Vulnerability in openclaw (CVE-2026-62205)
vulnerability in openclaw (CVE-2026-62205). Data can be tampered with by attackers. Mitigation: upgrade to `2026.6.6` or later.
CVE-2026-62203 Vulnerability in openclaw (CVE-2026-62203)
vulnerability in openclaw (CVE-2026-62203). Successful exploitation can lead to full system takeover.
CVE-2026-62202 Authorization Flaw in privilege-escalation (CVE-2026-62202)
vulnerability in privilege-escalation (CVE-2026-62202). Successful exploitation can lead to full system takeover.
CVE-2026-62201 SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62201)
SSRF in openclaw (CVE-2026-62201). Confidential information can be exposed externally.
CVE-2026-62200 Vulnerability in c (CVE-2026-62200)
vulnerability in c (CVE-2026-62200). Successful exploitation can lead to full system takeover.
CVE-2026-62199 Vulnerability in openclaw (CVE-2026-62199)
vulnerability in openclaw (CVE-2026-62199). Successful exploitation can lead to full system takeover.
CVE-2026-62198 Authorization Flaw in openclaw (CVE-2026-62198)
vulnerability in openclaw (CVE-2026-62198). Risk of unauthorized operations or information disclosure.
CVE-2026-62197 SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-62197)
SSRF in openclaw (CVE-2026-62197). Confidential information can be exposed externally.
CVE-2026-62196 Authorization Flaw in openclaw (CVE-2026-62196)
vulnerability in openclaw (CVE-2026-62196). Confidential information can be exposed externally.
CVE-2026-62195 Vulnerability in openclaw (CVE-2026-62195)
vulnerability in openclaw (CVE-2026-62195). Confidential information can be exposed externally.
CVE-2026-62189 Vulnerability in openclaw (CVE-2026-62189)
vulnerability in openclaw (CVE-2026-62189). Confidential information can be exposed externally.
CVE-2026-62190 Vulnerability in openclaw (CVE-2026-62190)
vulnerability in openclaw (CVE-2026-62190). Successful exploitation can lead to full system takeover.
CVE-2026-62191 Vulnerability in openclaw (CVE-2026-62191)
vulnerability in openclaw (CVE-2026-62191). Data can be tampered with by attackers.
CVE-2026-62193 Authorization Flaw in openclaw (CVE-2026-62193)
vulnerability in openclaw (CVE-2026-62193). Data can be tampered with by attackers. Mitigation: upgrade to `2026.6.9` or later.
CVE-2026-62194 Vulnerability in privilege-escalation (CVE-2026-62194)
vulnerability in privilege-escalation (CVE-2026-62194). Successful exploitation can lead to full system takeover.
CVE-2026-62192 Authorization Flaw in openclaw (CVE-2026-62192)
vulnerability in openclaw (CVE-2026-62192). Data can be tampered with by attackers.
CVE-2026-62188 Authorization Flaw in openclaw (CVE-2026-62188)
vulnerability in openclaw (CVE-2026-62188). Confidential information can be exposed externally.
CVE-2026-62187 Authorization Flaw in openclaw (CVE-2026-62187)
vulnerability in openclaw (CVE-2026-62187). Confidential information can be exposed externally.
CVE-2026-62186 Vulnerability in openclaw (CVE-2026-62186)
vulnerability in openclaw (CVE-2026-62186). Confidential information can be exposed externally.
CVE-2026-59261 Vulnerability in openclaw (CVE-2026-59261)
vulnerability in openclaw (CVE-2026-59261). Confidential information can be exposed externally.
CVE-2026-53866 OpenClaw: Shell inline-command parsing could miss an allowlist check
OpenClaw: Shell inline-command parsing could miss an allowlist check
CVE-2026-53865 Vulnerability in openclaw (CVE-2026-53865)
vulnerability in openclaw (CVE-2026-53865). Confidential information can be exposed externally. Exploitable via ``trash``. Mitigation: upgrade to `2026.5.2` or later.
CVE-2026-53864 OpenClaw: Host environment sanitizer missed two Node.js control variables
OpenClaw: Host environment sanitizer missed two Node.js control variables
CVE-2026-53861 Vulnerability in openclaw (CVE-2026-53861)
vulnerability in openclaw (CVE-2026-53861). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.6` or later.
CVE-2026-53856 Vulnerability in openclaw (CVE-2026-53856)
vulnerability in openclaw (CVE-2026-53856). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.24` or later.
CVE-2026-53857 OpenClaw: Zalo allowFrom could bind to mutable display names
OpenClaw: Zalo allowFrom could bind to mutable display names
CVE-2026-53858 Vulnerability in openclaw (CVE-2026-53858)
vulnerability in openclaw (CVE-2026-53858). Confidential information can be exposed externally. Exploitable via ``STATE_DIRECTORY``. Mitigation: upgrade to `2026.5.2` or later.
CVE-2026-53860 Authorization Flaw in openclaw (CVE-2026-53860)
vulnerability in openclaw (CVE-2026-53860). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.7` or later.
CVE-2026-53859 Vulnerability in openclaw (CVE-2026-53859)
vulnerability in openclaw (CVE-2026-53859). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.26` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →