Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-53816 |
|
Vulnerability in openclaw (CVE-2026-53816)
vulnerability in openclaw (CVE-2026-53816). Successful exploitation can lead to full system takeover. Exploitable via ``system.run``. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53817 |
|
Vulnerability in openclaw (CVE-2026-53817)
vulnerability in openclaw (CVE-2026-53817). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.22` or later.
|
| CVE-2026-53806 |
|
Vulnerability in openclaw (CVE-2026-53806)
vulnerability in openclaw (CVE-2026-53806). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.12` or later.
|
| CVE-2026-53809 |
|
Authorization Flaw in openclaw (CVE-2026-53809)
vulnerability in openclaw (CVE-2026-53809). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.25` or later.
|
| CVE-2026-35630 |
|
Vulnerability in openclaw (CVE-2026-35630)
vulnerability in openclaw (CVE-2026-35630). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-35673 |
|
Vulnerability in openclaw (CVE-2026-35673)
vulnerability in openclaw (CVE-2026-35673). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.29` or later.
|
| CVE-2026-35674 |
|
Vulnerability in openclaw (CVE-2026-35674)
vulnerability in openclaw (CVE-2026-35674). Successful exploitation can lead to full system takeover. Exploitable via ``operator.approvals``. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-32905 |
|
Authorization Flaw in openclaw (CVE-2026-32905)
vulnerability in openclaw (CVE-2026-32905). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.4` or later.
|
| CVE-2026-32906 |
|
Authorization Flaw in openclaw (CVE-2026-32906)
vulnerability in openclaw (CVE-2026-32906). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.
|
| CVE-2026-34507 |
|
Authorization Flaw in openclaw (CVE-2026-34507)
vulnerability in openclaw (CVE-2026-34507). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.29` or later.
|
| CVE-2026-8305 |
|
Authentication Bypass in openclaw (CVE-2026-8305)
authentication bypass in openclaw (CVE-2026-8305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45002 |
|
Vulnerability in openclaw (CVE-2026-45002)
vulnerability in openclaw (CVE-2026-45002). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-45000 |
|
SSRF (Server-Side Request Forgery) in openclaw (CVE-2026-45000)
SSRF in openclaw (CVE-2026-45000). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-45003 |
|
Vulnerability in openclaw (CVE-2026-45003)
vulnerability in openclaw (CVE-2026-45003). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-45001 |
|
Vulnerability in openclaw (CVE-2026-45001)
vulnerability in openclaw (CVE-2026-45001). Data can be tampered with by attackers. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-44998 |
|
Vulnerability in openclaw (CVE-2026-44998)
vulnerability in openclaw (CVE-2026-44998). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-45006 |
|
Vulnerability in openclaw (CVE-2026-45006)
vulnerability in openclaw (CVE-2026-45006). Successful exploitation can lead to full system takeover. Exploitable via ``gateway``. Mitigation: upgrade to `2026.4.23` or later.
|
| CVE-2026-45004 |
|
Code Injection in openclaw (CVE-2026-45004)
code injection in openclaw (CVE-2026-45004). Successful exploitation can lead to full system takeover. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.23` or later.
|
| CVE-2026-45005 |
|
Vulnerability in openclaw (CVE-2026-45005)
vulnerability in openclaw (CVE-2026-45005). Data can be tampered with by attackers. Exploitable via ``SecretRef``. Mitigation: upgrade to `2026.4.23` or later.
|
| CVE-2026-44993 |
|
Authorization Flaw in openclaw (CVE-2026-44993)
vulnerability in openclaw (CVE-2026-44993). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-44997 |
|
Vulnerability in openclaw (CVE-2026-44997)
vulnerability in openclaw (CVE-2026-44997). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-44995 |
|
Vulnerability in openclaw (CVE-2026-44995)
vulnerability in openclaw (CVE-2026-44995). Successful exploitation can lead to full system takeover. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-44996 |
|
Information Disclosure in openclaw (CVE-2026-44996)
vulnerability in openclaw (CVE-2026-44996). Risk of unauthorized operations or information disclosure. Exploitable via ``ReplyPayload.mediaUrl``. Mitigation: upgrade to `2026.4.15` or later.
|
| CVE-2026-44992 |
|
Vulnerability in openclaw (CVE-2026-44992)
vulnerability in openclaw (CVE-2026-44992). Confidential information can be exposed externally. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-44994 |
|
Authentication Bypass in openclaw (CVE-2026-44994)
authentication bypass in openclaw (CVE-2026-44994). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-44999 |
|
Vulnerability in openclaw (CVE-2026-44999)
vulnerability in openclaw (CVE-2026-44999). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
|
| CVE-2026-44991 |
|
Vulnerability in openclaw (CVE-2026-44991)
vulnerability in openclaw (CVE-2026-44991). Risk of unauthorized operations or information disclosure. Exploitable via ``commands.ownerAllowFrom``. Mitigation: upgrade to `2026.4.21` or later.
|
| CVE-2026-44113 |
|
Vulnerability in openclaw (CVE-2026-44113)
vulnerability in openclaw (CVE-2026-44113). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-44112 |
|
Vulnerability in openclaw (CVE-2026-44112)
vulnerability in openclaw (CVE-2026-44112). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-42432 |
|
Vulnerability in openclaw (CVE-2026-42432)
vulnerability in openclaw (CVE-2026-42432). Successful exploitation can lead to full system takeover. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.8` or later.
|
| CVE-2026-42429 |
|
Privilege Escalation in openclaw (CVE-2026-42429)
vulnerability in openclaw (CVE-2026-42429). Data can be tampered with by attackers. Exploitable via ``operator.read``. Mitigation: upgrade to `2026.4.8` or later.
|
| CVE-2026-41368 |
|
Vulnerability in openclaw (CVE-2026-41368)
vulnerability in openclaw (CVE-2026-41368). Confidential information can be exposed externally. Exploitable via ``env``. Mitigation: upgrade to `>= 2026.3.28` or later.
|
| CVE-2026-41369 |
|
Vulnerability in openclaw (CVE-2026-41369)
vulnerability in openclaw (CVE-2026-41369). Confidential information can be exposed externally.
|
| CVE-2026-41370 |
|
Path Traversal in openclaw (CVE-2026-41370)
path traversal in openclaw (CVE-2026-41370). Confidential information can be exposed externally. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.31` or later.
|
| CVE-2026-41371 |
|
Vulnerability in openclaw (CVE-2026-41371)
vulnerability in openclaw (CVE-2026-41371). Data can be tampered with by attackers. Exploitable via ``chat.send``. Mitigation: upgrade to `>= 2026.3.28` or later.
|
| CVE-2026-41372 |
|
Vulnerability in openclaw (CVE-2026-41372)
vulnerability in openclaw (CVE-2026-41372). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41362 |
|
Authentication Bypass in openclaw (CVE-2026-41362)
authentication bypass in openclaw (CVE-2026-41362). Risk of unauthorized operations or information disclosure. Exploitable via ``event_name``. Mitigation: upgrade to `2026.3.31` or later.
|
| CVE-2026-41364 |
|
Vulnerability in openclaw (CVE-2026-41364)
vulnerability in openclaw (CVE-2026-41364). Data can be tampered with by attackers.
|
| CVE-2026-41366 |
|
Vulnerability in openclaw (CVE-2026-41366)
vulnerability in openclaw (CVE-2026-41366). Confidential information can be exposed externally. Exploitable via ``appendLocalMediaParentRoots``. Mitigation: upgrade to `2026.3.31` or later.
|
| CVE-2026-41367 |
|
Vulnerability in openclaw (CVE-2026-41367)
vulnerability in openclaw (CVE-2026-41367). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `>= 2026.3.28` or later.
|
| CVE-2026-41355 |
|
Vulnerability in openclaw (CVE-2026-41355)
vulnerability in openclaw (CVE-2026-41355). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40037 |
|
Open Redirect in openclaw (CVE-2026-40037)
vulnerability in openclaw (CVE-2026-40037). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.8` or later.
|
| CVE-2026-34511 |
|
Vulnerability in openclaw (CVE-2026-34511)
vulnerability in openclaw (CVE-2026-34511). Confidential information can be exposed externally.
|
| CVE-2026-41365 |
|
Vulnerability in openclaw (CVE-2026-41365)
vulnerability in openclaw (CVE-2026-41365). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.31` or later.
|
| CVE-2026-34425 |
|
Vulnerability in openclaw (CVE-2026-34425)
vulnerability in openclaw (CVE-2026-34425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34426 |
|
Vulnerability in openclaw (CVE-2026-34426)
vulnerability in openclaw (CVE-2026-34426). Data can be tampered with by attackers. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.22` or later.
|
| CVE-2026-41363 |
|
Path Traversal in openclaw (CVE-2026-41363)
path traversal in openclaw (CVE-2026-41363). Confidential information can be exposed externally. Mitigation: upgrade to `>= 2026.3.28` or later.
|
| CVE-2026-34503 |
|
Vulnerability in openclaw (CVE-2026-34503)
vulnerability in openclaw (CVE-2026-34503). Confidential information can be exposed externally.
|
| CVE-2026-34504 |
|
SSRF (Server-Side Request Forgery) in c (CVE-2026-34504)
SSRF in c (CVE-2026-34504). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33580 |
|
Vulnerability in openclaw (CVE-2026-33580)
vulnerability in openclaw (CVE-2026-33580). Risk of unauthorized operations or information disclosure.
|