openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-35640Mediumopenclaw: OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation CVE-2026-35629Highopenclaw: OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)CVE-2026-35617Lowopenclaw: OpenClaw: Google Chat Authz Bypass via Group Policy Rebinding with Mutable Space displayName GHSA-Q2QC-744P-66R2Highopenclaw: OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility CVE-2026-35657Mediumopenclaw: OpenClaw: Gateway HTTP Session History Route Bypasses Operator Read Scope CVE-2026-35628Mediumopenclaw: OpenClaw: Telegram Webhook Missing Guess Rate Limiting Enables Brute-Force Guessing of Weak Webhook Secret GHSA-MW7W-G3MG-XQM7Mediumopenclaw: OpenClaw: BlueBubbles Group Reactions Bypass requireMention and Still Enqueue Agent-Visible System Events CVE-2026-35647Mediumopenclaw: OpenClaw: Matrix Verification Notices Bypass Matrix DM Policy and Reply to Unpaired DM Peers CVE-2026-35623Mediumopenclaw: OpenClaw: BlueBubbles Webhook Missing Rate Limiting Enables Brute-Force Password Guessing CVE-2026-35669Highopenclaw: OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers GHSA-FQW4-MPH7-2VR8Criticalopenclaw: OpenClaw: Silent privilege escalation via gateway shared-auth reconnect CVE-2026-35663Criticalopenclaw: OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin GHSA-9P93-7J67-5PC2Highopenclaw: OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding CVE-2026-35632Mediumopenclaw: OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)CVE-2026-35658Mediumopenclaw: OpenClaw: Image Tool `tools.fs.workspaceOnly` Bypass via Sandbox Bridge Mounts CVE-2026-35655Mediumopenclaw: OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting CVE-2026-35635Mediumopenclaw: OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision CVE-2026-35662Mediumopenclaw: OpenClaw leaf subagents can bypass controlScope restrictions to send messages to child sessions CVE-2026-35656Mediumopenclaw: OpenClaw: Forwarding header spoofing bypasses gateway.trustedProxies origin detection CVE-2026-35639Criticalopenclaw: OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve CVE-2026-35622Mediumopenclaw: OpenClaw: Google Chat app-url webhook auth accepted non-deployment add-on principals CVE-2026-35624Lowopenclaw: OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens CVE-2026-35649Lowopenclaw: OpenClaw: Tlon settings empty-allowlist reconciliation bypassed intended revocation CVE-2026-35637Mediumopenclaw: OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete GHSA-3W6X-GV34-MQPFHighopenclaw: OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo