Skip to content

Vendor

openclaw vulnerabilities

615 published CVES affecting openclaw, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
615
Critical
28
High
259
Medium
268
Low
60
Unscored
0
CISA KEV
0
Atom feed of openclaw alerts

Products

Latest openclaw CVEs

Newest publication first · page 1 of 25

  5. CVE-2026-101883 OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present

    Published
    MediumCVSS 5.3 EPSS 0.25%

    OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make the node's WebView s...

  6. CVE-2026-101881 OpenClaw Windows Node before 2026.7.1 Denial of Service

    Published
    HighCVSS 7.1 EPSS 0.37%

    OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation frames without EndOfM...

  7. CVE-2026-101880 OpenClaw Windows Node before 2026.7.1 Authorization Bypass

    Published
    HighCVSS 8.7 EPSS 0.69%

    OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agents can bypass approval...

  8. CVE-2026-101879 OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

    Published
    HighCVSS 7.1 EPSS 0.36%

    OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.sn...

  9. CVE-2026-100604 ClawHub Authentication Bypass via Former Publisher Skill Control

    Published
    MediumCVSS 5.3 EPSS 0.27%

    ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerUserId of its original publisher, and transfer and lifecycle authorization checks trust that historical user before requir...

  10. CVE-2026-100603 ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports

    Published
    HighCVSS 8.7 EPSS 0.29%

    ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding (moderationStatus: hidden) of that skill from the catalog without any moderato...

  12. CVE-2026-100601 ClawHub SSRF via Unchecked DNS Resolution in Profile Image

    Published
    MediumCVSS 6.9 EPSS 0.33%

    ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public profile preview's image fetching. The preview accepts a user-supplied image URL and checks the textual hostname against private-address patterns, but does not validat...

  13. CVE-2026-100600 ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous API

    Published
    MediumCVSS 6.9 EPSS 0.37%

    ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identity, so all direct anonymous API requests share a single default quota allowance. A remote, unauthenticated caller can drain that shared allowance and thereby den...

  14. CVE-2026-100583 OpenClaw Discord before 2026.7.1 Authorization Bypass

    Published
    MediumCVSS 5.3 EPSS 0.18%

    OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to retrieve information excluded by channel allowlists. Attackers can bypass the configured Discord read-target policy to access...

  18. CVE-2026-100566 OpenClaw LINE before 2026.8.1 Access Control Inheritance

    Published
    MediumCVSS 6.9 EPSS 0.20%

    OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inherits DM allowFrom values when groupAllowFrom is not explicitly configured. Attackers with group participation can trigger the agent despite configured group allo...

  19. CVE-2026-100551 OpenClaw iOS Control UI TLS Pin Enforcement Bypass

    Published
    CriticalCVSS 9.0 EPSS 0.17%

    OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI. While native connections enforced the saved Gateway fingerprint, the authenticated Terminal and session Dashboard WebViews omitted it. If a user had accepted a Gateway f...

  20. CVE-2026-100544 openclaw voice-call before 2026.8.1 Authorization Bypass

    Published
    HighCVSS 8.7 EPSS 0.25%

    openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority t...

  23. CVE-2026-100532 openclaw WhatsApp before 2026.8.1 Authentication Bypass

    Published
    HighCVSS 7.2 EPSS 0.27%

    @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owner status, so the owner-only tool boundary is not enforced. An admitted non-owner sender able to steer the tool can reques...

  24. CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass

    Published
    HighCVSS 7.1 EPSS 0.33%

    The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to the requested conversation, the conversation-authorization check fails open. An authenticated caller...

  25. CVE-2026-100526 Vulnerability in discord

    Published
    MediumCVSS 6.0 EPSS 0.28%

    OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host pat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.