openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-32899Mediumopenclaw: OpenClaw's Slack reaction/pin sender-policy consistency issue in non-message ingress CVE-2026-32052Mediumopenclaw: OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text CVE-2026-32043Mediumopenclaw: OpenClaw's system.run approval TOCTOU via mutable symlink cwd target on node host CVE-2026-32064Highopenclaw: OpenClaw's andbox browser noVNC observer lacked VNC authentication CVE-2026-32027Highopenclaw: OpenClaw DM pairing-store identities could satisfy group allowlist authorization CVE-2026-32023Mediumopenclaw: OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode CVE-2026-32053Mediumopenclaw: OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse CVE-2026-32022Mediumopenclaw: OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass)GHSA-H656-5VCF-CM23Mediumopenclaw: OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check GHSA-9F72-QCPW-2HXCHighopenclaw: OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs CVE-2026-22169Mediumopenclaw: OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints CVE-2026-32036Highopenclaw: OpenClaw has gateway plugin auth bypass via encoded dot-segment traversal in protected /api/channels paths CVE-2026-32045Mediumopenclaw: OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes CVE-2026-22171Mediumopenclaw: OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir()CVE-2026-32040Lowopenclaw: OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation CVE-2026-32026Mediumopenclaw: Temporary path handling could write outside OpenClaw temp boundary CVE-2026-32046Mediumopenclaw: OpenClaw: Chrome --no-sandbox disabled OS-level browser sandbox in sandbox browser container CVE-2026-32037Highopenclaw: OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists CVE-2026-28393Highopenclaw: OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading CVE-2026-32000Highopenclaw: OpenClaw has command injection via Windows shell fallback in Lobster tool execution GHSA-QJ22-XQJR-V83VHighopenclaw: OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection CVE-2026-31992Mediumopenclaw: OpenClaw has allowlist exec-guard bypass via env -S CVE-2026-32016Mediumopenclaw: OpenClaw: macOS optional allowlist basename matching could bypass path-based policy CVE-2026-32003Highopenclaw: OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE)CVE-2026-32014Highopenclaw: OpenClaw: Node reconnect metadata spoofing could bypass platform-based node command policy

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo