Openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-28478Highopenclaw: OpenClaw affected by denial of service via unbounded webhook request body buffering CVE-2026-28452Mediumopenclaw: OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)CVE-2026-29612Mediumopenclaw: OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks CVE-2026-29609Highopenclaw: OpenClaw affected by denial of service via unbounded URL-backed media fetch CVE-2026-28392Highopenclaw: OpenClaw Slack: dmPolicy=open allowed any DM sender to run privileged slash commands CVE-2026-28463Highopenclaw: OpenClaw exec approvals: safeBins could bypass stdin-only constraints via shell expansion CVE-2026-26323Highopenclaw: OpenClaw has a command injection in maintainer clawtributors updater CVE-2026-26329Highopenclaw: OpenClaw has a path traversal in browser upload allows local file read CVE-2026-26328Mediumopenclaw: OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities CVE-2026-26327Highopenclaw: OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning GHSA-CHM2-M3W2-WCXMLowopenclaw: OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch CVE-2026-26326Mediumopenclaw: OpenClaw skills.status could leak secrets to operator.read clients CVE-2026-26325Highopenclaw: OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals CVE-2026-26324Highopenclaw: OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)CVE-2026-26322Highopenclaw: OpenClaw Gateway tool allowed unrestricted gatewayUrl override CVE-2026-26321Highopenclaw: OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension CVE-2026-26320Highopenclaw: OpenClaw macOS deep link confirmation truncation can conceal executed agent message CVE-2026-26319Highopenclaw: OpenClaw is Missing Webhook Authentication in Telnyx Provider Allows Unauthenticated Requests CVE-2026-28447Highopenclaw: OpenClaw has a Path Traversal in Plugin Installation CVE-2026-28473Highopenclaw: OpenClaw authorization bypass: operator.write can resolve exec approvals via chat.send -> /approve CVE-2026-28481Mediumopenclaw: OpenClaw MS Teams inbound attachment downloader leaks bearer tokens to allowlisted suffix domains CVE-2026-28448Highopenclaw: OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline CVE-2026-28446Criticalopenclaw: OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching)CVE-2026-28454Criticalopenclaw: OpenClaw has a potential access-group authorization bypass if channel type lookup fails CVE-2026-28471Mediumopenclaw: OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo