Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: openclaw Clear
ID Title
CVE-2026-53816 Vulnerability in openclaw (CVE-2026-53816)
vulnerability in openclaw (CVE-2026-53816). Successful exploitation can lead to full system takeover. Exploitable via ``system.run``. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-53817 Vulnerability in openclaw (CVE-2026-53817)
vulnerability in openclaw (CVE-2026-53817). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.22` or later.
CVE-2026-53806 Vulnerability in openclaw (CVE-2026-53806)
vulnerability in openclaw (CVE-2026-53806). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.12` or later.
CVE-2026-53809 Authorization Flaw in openclaw (CVE-2026-53809)
vulnerability in openclaw (CVE-2026-53809). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.25` or later.
CVE-2026-35630 Vulnerability in openclaw (CVE-2026-35630)
vulnerability in openclaw (CVE-2026-35630). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-35673 Vulnerability in openclaw (CVE-2026-35673)
vulnerability in openclaw (CVE-2026-35673). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.
CVE-2026-35674 Vulnerability in openclaw (CVE-2026-35674)
vulnerability in openclaw (CVE-2026-35674). Successful exploitation can lead to full system takeover. Exploitable via ``operator.approvals``. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-32905 Authorization Flaw in openclaw (CVE-2026-32905)
vulnerability in openclaw (CVE-2026-32905). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.4` or later.
CVE-2026-32906 Authorization Flaw in openclaw (CVE-2026-32906)
vulnerability in openclaw (CVE-2026-32906). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.
CVE-2026-34507 Authorization Flaw in openclaw (CVE-2026-34507)
vulnerability in openclaw (CVE-2026-34507). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.29` or later.
CVE-2026-8305 Authentication Bypass in openclaw (CVE-2026-8305)
authentication bypass in openclaw (CVE-2026-8305). Risk of unauthorized operations or information disclosure.
CVE-2026-45002 Vulnerability in openclaw (CVE-2026-45002)
vulnerability in openclaw (CVE-2026-45002). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-45000 SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-45000)
SSRF in openclaw (CVE-2026-45000). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-45003 Vulnerability in openclaw (CVE-2026-45003)
vulnerability in openclaw (CVE-2026-45003). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.22` or later.
CVE-2026-45001 Vulnerability in openclaw (CVE-2026-45001)
vulnerability in openclaw (CVE-2026-45001). Data can be tampered with by attackers. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-44998 Vulnerability in openclaw (CVE-2026-44998)
vulnerability in openclaw (CVE-2026-44998). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-45006 Vulnerability in openclaw (CVE-2026-45006)
vulnerability in openclaw (CVE-2026-45006). Successful exploitation can lead to full system takeover. Exploitable via ``gateway``. Mitigation: upgrade to `2026.4.23` or later.
CVE-2026-45004 Code Injection in openclaw (CVE-2026-45004)
code injection in openclaw (CVE-2026-45004). Successful exploitation can lead to full system takeover. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.23` or later.
CVE-2026-45005 Vulnerability in openclaw (CVE-2026-45005)
vulnerability in openclaw (CVE-2026-45005). Data can be tampered with by attackers. Exploitable via ``SecretRef``. Mitigation: upgrade to `2026.4.23` or later.
CVE-2026-44993 Authorization Flaw in openclaw (CVE-2026-44993)
vulnerability in openclaw (CVE-2026-44993). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-44997 Vulnerability in openclaw (CVE-2026-44997)
vulnerability in openclaw (CVE-2026-44997). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.22` or later.
CVE-2026-44995 Vulnerability in openclaw (CVE-2026-44995)
vulnerability in openclaw (CVE-2026-44995). Successful exploitation can lead to full system takeover. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-44996 Information Disclosure in openclaw (CVE-2026-44996)
vulnerability in openclaw (CVE-2026-44996). Risk of unauthorized operations or information disclosure. Exploitable via ``ReplyPayload.mediaUrl``. Mitigation: upgrade to `2026.4.15` or later.
CVE-2026-44992 Vulnerability in openclaw (CVE-2026-44992)
vulnerability in openclaw (CVE-2026-44992). Confidential information can be exposed externally. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-44994 Authentication Bypass in openclaw (CVE-2026-44994)
authentication bypass in openclaw (CVE-2026-44994). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.22` or later.
CVE-2026-44999 Vulnerability in openclaw (CVE-2026-44999)
vulnerability in openclaw (CVE-2026-44999). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-44991 Vulnerability in openclaw (CVE-2026-44991)
vulnerability in openclaw (CVE-2026-44991). Risk of unauthorized operations or information disclosure. Exploitable via ``commands.ownerAllowFrom``. Mitigation: upgrade to `2026.4.21` or later.
CVE-2026-44113 Vulnerability in openclaw (CVE-2026-44113)
vulnerability in openclaw (CVE-2026-44113). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.22` or later.
CVE-2026-44112 Vulnerability in openclaw (CVE-2026-44112)
vulnerability in openclaw (CVE-2026-44112). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.22` or later.
CVE-2026-42432 Vulnerability in openclaw (CVE-2026-42432)
vulnerability in openclaw (CVE-2026-42432). Successful exploitation can lead to full system takeover. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.8` or later.
CVE-2026-42429 Privilege Escalation in openclaw (CVE-2026-42429)
vulnerability in openclaw (CVE-2026-42429). Data can be tampered with by attackers. Exploitable via ``operator.read``. Mitigation: upgrade to `2026.4.8` or later.
CVE-2026-41368 Vulnerability in openclaw (CVE-2026-41368)
vulnerability in openclaw (CVE-2026-41368). Confidential information can be exposed externally. Exploitable via ``env``. Mitigation: upgrade to `>= 2026.3.28` or later.
CVE-2026-41369 Vulnerability in openclaw (CVE-2026-41369)
vulnerability in openclaw (CVE-2026-41369). Confidential information can be exposed externally.
CVE-2026-41370 Path Traversal in openclaw (CVE-2026-41370)
path traversal in openclaw (CVE-2026-41370). Confidential information can be exposed externally. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.31` or later.
CVE-2026-41371 Vulnerability in openclaw (CVE-2026-41371)
vulnerability in openclaw (CVE-2026-41371). Data can be tampered with by attackers. Exploitable via ``chat.send``. Mitigation: upgrade to `>= 2026.3.28` or later.
CVE-2026-41372 Vulnerability in openclaw (CVE-2026-41372)
vulnerability in openclaw (CVE-2026-41372). Risk of unauthorized operations or information disclosure.
CVE-2026-41362 Authentication Bypass in openclaw (CVE-2026-41362)
authentication bypass in openclaw (CVE-2026-41362). Risk of unauthorized operations or information disclosure. Exploitable via ``event_name``. Mitigation: upgrade to `2026.3.31` or later.
CVE-2026-41364 Vulnerability in openclaw (CVE-2026-41364)
vulnerability in openclaw (CVE-2026-41364). Data can be tampered with by attackers.
CVE-2026-41366 Vulnerability in openclaw (CVE-2026-41366)
vulnerability in openclaw (CVE-2026-41366). Confidential information can be exposed externally. Exploitable via ``appendLocalMediaParentRoots``. Mitigation: upgrade to `2026.3.31` or later.
CVE-2026-41367 Vulnerability in openclaw (CVE-2026-41367)
vulnerability in openclaw (CVE-2026-41367). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `>= 2026.3.28` or later.
CVE-2026-41355 Vulnerability in openclaw (CVE-2026-41355)
vulnerability in openclaw (CVE-2026-41355). Successful exploitation can lead to full system takeover.
CVE-2026-40037 Open Redirect in openclaw (CVE-2026-40037)
vulnerability in openclaw (CVE-2026-40037). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.8` or later.
CVE-2026-34511 Vulnerability in openclaw (CVE-2026-34511)
vulnerability in openclaw (CVE-2026-34511). Confidential information can be exposed externally.
CVE-2026-41365 Vulnerability in openclaw (CVE-2026-41365)
vulnerability in openclaw (CVE-2026-41365). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.31` or later.
CVE-2026-34425 Vulnerability in openclaw (CVE-2026-34425)
vulnerability in openclaw (CVE-2026-34425). Risk of unauthorized operations or information disclosure.
CVE-2026-34426 Vulnerability in openclaw (CVE-2026-34426)
vulnerability in openclaw (CVE-2026-34426). Data can be tampered with by attackers. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.22` or later.
CVE-2026-41363 Path Traversal in openclaw (CVE-2026-41363)
path traversal in openclaw (CVE-2026-41363). Confidential information can be exposed externally. Mitigation: upgrade to `>= 2026.3.28` or later.
CVE-2026-34503 Vulnerability in openclaw (CVE-2026-34503)
vulnerability in openclaw (CVE-2026-34503). Confidential information can be exposed externally.
CVE-2026-34504 SSRF (Server-Side Request Forgery) in c (CVE-2026-34504)
SSRF in c (CVE-2026-34504). Risk of unauthorized operations or information disclosure.
CVE-2026-33580 Vulnerability in openclaw (CVE-2026-33580)
vulnerability in openclaw (CVE-2026-33580). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →