Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Tag: openclaw Clear

ID	Title	Severity	Tags	Detected
CVE-2026-53866	OpenClaw: Shell inline-command parsing could miss an allowlist check OpenClaw: Shell inline-command parsing could miss an allowlist check	High	Cwe 862 Remote Code Execution Openclaw	3 weeks ago
CVE-2026-53865	Vulnerability in openclaw (CVE-2026-53865) vulnerability in openclaw (CVE-2026-53865). Confidential information can be exposed externally. Exploitable via ``trash``. Mitigation: upgrade to `2026.5.2` or later.	High	Path Traversal Cwe 426 Openclaw	3 weeks ago
CVE-2026-53864	OpenClaw: Host environment sanitizer missed two Node.js control variables OpenClaw: Host environment sanitizer missed two Node.js control variables	High	JavaScript Cwe 184 Nodejs Openclaw	3 weeks ago
CVE-2026-53863	Vulnerability in openclaw (CVE-2026-53863) vulnerability in openclaw (CVE-2026-53863). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.25` or later.	High	Cwe 639 Openclaw	3 weeks ago
CVE-2026-53862	Privilege Escalation in openclaw (CVE-2026-53862) vulnerability in openclaw (CVE-2026-53862). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.	Medium	Cwe 266 Cwe 345 Openclaw	3 weeks ago
CVE-2026-53861	Vulnerability in openclaw (CVE-2026-53861) vulnerability in openclaw (CVE-2026-53861). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.6` or later.	Medium	Cwe 184 Openclaw	3 weeks ago
CVE-2026-53856	Vulnerability in openclaw (CVE-2026-53856) vulnerability in openclaw (CVE-2026-53856). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.24` or later.	Medium	Cwe 732 Openclaw	3 weeks ago
CVE-2026-53857	OpenClaw: Zalo allowFrom could bind to mutable display names OpenClaw: Zalo allowFrom could bind to mutable display names	High	Cwe 290 Policy Enforcement Remote Code Execution Web Application +2	3 weeks ago
CVE-2026-53858	Vulnerability in openclaw (CVE-2026-53858) vulnerability in openclaw (CVE-2026-53858). Confidential information can be exposed externally. Exploitable via ``STATE_DIRECTORY``. Mitigation: upgrade to `2026.5.2` or later.	High	Cwe 426 Openclaw	3 weeks ago
CVE-2026-53859	Vulnerability in openclaw (CVE-2026-53859) vulnerability in openclaw (CVE-2026-53859). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.26` or later.	Medium	Cwe 918 Cwe 1023 Openclaw	3 weeks ago
CVE-2026-53860	Authorization Flaw in openclaw (CVE-2026-53860) vulnerability in openclaw (CVE-2026-53860). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.7` or later.	Medium	Cwe 807 Cwe 863 Openclaw	3 weeks ago
CVE-2026-53855	OpenClaw: Shell positional parameters could weaken strict inline-eval checks OpenClaw: Shell positional parameters could weaken strict inline-eval checks	High	Cwe 184 Cwe 863 Remote Code Execution Openclaw	3 weeks ago
CVE-2026-53854	Authorization Flaw in openclaw (CVE-2026-53854) vulnerability in openclaw (CVE-2026-53854). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.25` or later.	Medium	Privilege Escalation Cwe 863 Openclaw	3 weeks ago
CVE-2026-53853	OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns	High	Cwe 693 Cwe 863 Linux macOS +1	3 weeks ago
CVE-2026-53852	Vulnerability in openclaw (CVE-2026-53852) vulnerability in openclaw (CVE-2026-53852). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.25` or later.	Medium	Cwe 636 Openclaw	3 weeks ago
CVE-2026-53851	Vulnerability in openclaw (CVE-2026-53851) vulnerability in openclaw (CVE-2026-53851). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.	Medium	Cwe 862 Openclaw	3 weeks ago
CVE-2026-53850	Vulnerability in openclaw (CVE-2026-53850) vulnerability in openclaw (CVE-2026-53850). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.25` or later.	Medium	Cwe 862 Openclaw	3 weeks ago
CVE-2026-53849	OpenClaw: Discord allowFrom could bind to mutable display names OpenClaw: Discord allowFrom could bind to mutable display names	High	Privilege Escalation Cwe 290 Web Application Openclaw	3 weeks ago
CVE-2026-53843	OpenClaw: Pairing-scoped device session could restore revoked node token authority OpenClaw: Pairing-scoped device session could restore revoked node token authority	High	Cwe 613 WebSocket Authentication Bypass Openclaw	3 weeks ago
CVE-2026-53842	Vulnerability in openclaw (CVE-2026-53842) vulnerability in openclaw (CVE-2026-53842). Confidential information can be exposed externally. Exploitable via ``gcloud``. Mitigation: upgrade to `2026.5.2` or later.	High	Python Cwe 426 Openclaw	3 weeks ago
CVE-2026-53844	Vulnerability in openclaw (CVE-2026-53844) vulnerability in openclaw (CVE-2026-53844). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.	Medium	Cwe 862 Openclaw	3 weeks ago
CVE-2026-53845	Vulnerability in openclaw (CVE-2026-53845) vulnerability in openclaw (CVE-2026-53845). Risk of unauthorized operations or information disclosure. Exploitable via ``runBeforeToolCallHook``. Mitigation: upgrade to `2026.5.6` or later.	Medium	Cwe 693 Openclaw	3 weeks ago
CVE-2026-53847	Vulnerability in openclaw (CVE-2026-53847) vulnerability in openclaw (CVE-2026-53847). Risk of unauthorized operations or information disclosure. Exploitable via ``operator.write``. Mitigation: upgrade to `2026.5.6` or later.	Medium	Privilege Escalation Cwe 266 Openclaw	3 weeks ago
CVE-2026-53848	OS Command Injection in openclaw (CVE-2026-53848) OS command injection in openclaw (CVE-2026-53848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.26` or later.	Medium	Cwe 184 Openclaw	3 weeks ago
CVE-2026-53846	Vulnerability in openclaw (CVE-2026-53846) vulnerability in openclaw (CVE-2026-53846). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.	High	Path Traversal Cwe 426 Openclaw	3 weeks ago
CVE-2026-53841	Cross-Site Scripting (XSS) in openclaw (CVE-2026-53841) cross-site scripting in openclaw (CVE-2026-53841). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.	Medium	JavaScript Cross-Site Scripting Cwe 83 Openclaw	3 weeks ago
CVE-2026-53840	Vulnerability in openclaw (CVE-2026-53840) vulnerability in openclaw (CVE-2026-53840). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.12` or later.	High	Cwe 522 Openclaw	3 weeks ago
CVE-2026-53839	Vulnerability in openclaw (CVE-2026-53839) vulnerability in openclaw (CVE-2026-53839). Confidential information can be exposed externally.	Medium	Cwe 1023 Openclaw	3 weeks ago
CVE-2026-53838	Vulnerability in openclaw (CVE-2026-53838) vulnerability in openclaw (CVE-2026-53838). Successful exploitation can lead to full system takeover.	Critical	Cwe 367 Openclaw	3 weeks ago
CVE-2026-53837	Vulnerability in openclaw (CVE-2026-53837) vulnerability in openclaw (CVE-2026-53837). Risk of unauthorized operations or information disclosure.	Low	Cwe 636 Openclaw	3 weeks ago
CVE-2026-53836	Vulnerability in openclaw (CVE-2026-53836) vulnerability in openclaw (CVE-2026-53836). Successful exploitation can lead to full system takeover.	High	Cwe 184 Openclaw	3 weeks ago
CVE-2026-53835	Authorization Flaw in openclaw (CVE-2026-53835) vulnerability in openclaw (CVE-2026-53835). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863 Openclaw	3 weeks ago
CVE-2026-53834	Authorization Flaw in openclaw (CVE-2026-53834) vulnerability in openclaw (CVE-2026-53834). Data can be tampered with by attackers.	High	Cwe 863 Openclaw	3 weeks ago
CVE-2026-53831	Vulnerability in openclaw (CVE-2026-53831) vulnerability in openclaw (CVE-2026-53831). Confidential information can be exposed externally.	High	Cwe 367 Openclaw	3 weeks ago
CVE-2026-53827	SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-53827) SSRF in openclaw (CVE-2026-53827). Confidential information can be exposed externally.	Medium	Cwe 918 Openclaw	3 weeks ago
CVE-2026-53828	Authorization Flaw in openclaw (CVE-2026-53828) vulnerability in openclaw (CVE-2026-53828). Successful exploitation can lead to full system takeover.	High	Cwe 863 Openclaw	3 weeks ago
CVE-2026-53829	Vulnerability in openclaw (CVE-2026-53829) vulnerability in openclaw (CVE-2026-53829). Successful exploitation can lead to full system takeover.	High	Cwe 451 Openclaw	3 weeks ago
CVE-2026-53830	Vulnerability in openclaw (CVE-2026-53830) vulnerability in openclaw (CVE-2026-53830). Data can be tampered with by attackers.	Medium	Cwe 613 Openclaw	3 weeks ago
CVE-2026-53833	Vulnerability in openclaw (CVE-2026-53833) vulnerability in openclaw (CVE-2026-53833). Confidential information can be exposed externally.	High	Cwe 290 Openclaw	3 weeks ago
CVE-2026-53826	Vulnerability in c (CVE-2026-53826) vulnerability in c (CVE-2026-53826). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 668 Openclaw	3 weeks ago
CVE-2026-53825	Path Traversal in openclaw (CVE-2026-53825) path traversal in openclaw (CVE-2026-53825). Confidential information can be exposed externally.	Medium	Cwe 22 Openclaw	3 weeks ago
CVE-2026-53824	Vulnerability in openclaw (CVE-2026-53824) vulnerability in openclaw (CVE-2026-53824). Data can be tampered with by attackers.	Medium	Cwe 613 Openclaw	3 weeks ago
CVE-2026-53823	Vulnerability in privilege-escalation (CVE-2026-53823) vulnerability in privilege-escalation (CVE-2026-53823). Confidential information can be exposed externally.	High	Privilege Escalation Cwe 290 Openclaw	3 weeks ago
CVE-2026-53822	Command Injection in openclaw (CVE-2026-53822) command injection in openclaw (CVE-2026-53822). Successful exploitation can lead to full system takeover.	High	Cwe 367 Cwe 77 Openclaw	3 weeks ago
CVE-2026-53821	Vulnerability in openclaw (CVE-2026-53821) vulnerability in openclaw (CVE-2026-53821). Successful exploitation can lead to full system takeover.	High	Cwe 862 Openclaw	3 weeks ago
CVE-2026-53820	Vulnerability in openclaw (CVE-2026-53820) vulnerability in openclaw (CVE-2026-53820). Data can be tampered with by attackers.	Medium	Cwe 862 Openclaw	3 weeks ago
CVE-2026-53807	Authorization Flaw in openclaw (CVE-2026-53807) vulnerability in openclaw (CVE-2026-53807). Successful exploitation can lead to full system takeover.	High	Cwe 863 Openclaw	3 weeks ago
CVE-2026-53808	Authorization Flaw in openclaw (CVE-2026-53808) vulnerability in openclaw (CVE-2026-53808). Data can be tampered with by attackers.	Medium	Cwe 863 Openclaw	3 weeks ago
CVE-2026-53818	Vulnerability in openclaw (CVE-2026-53818) vulnerability in openclaw (CVE-2026-53818). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.24` or later.	Medium	Cwe 862 Openclaw	3 weeks ago
CVE-2026-53819	Vulnerability in openclaw (CVE-2026-53819) vulnerability in openclaw (CVE-2026-53819). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.27` or later.	High	Cwe 426 Openclaw	3 weeks ago

Vulnerabilities

🍪 About cookies