openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-53844Mediumopenclaw: OpenClaw: memory-wiki shared search could miss session visibility checks CVE-2026-53856Mediumopenclaw: OpenClaw: Config recovery could restore openclaw.json with broad file permissions CVE-2026-53857Highopenclaw: OpenClaw: Zalo allowFrom could bind to mutable display names CVE-2026-53845Lowopenclaw: OpenClaw: Skill-command dispatch could skip before-tool-call hooks CVE-2026-53847Mediumopenclaw: OpenClaw: Active Memory write scope could mutate global config CVE-2026-53841Mediumopenclaw: OpenClaw: Exported session HTML could keep unsafe markdown links CVE-2026-53851Mediumopenclaw: OpenClaw: Slack reaction events could ignore reaction notification settings CVE-2026-53862Lowopenclaw: OpenClaw: Bootstrap token replay could widen pending pairing scopes CVE-2026-53855Highopenclaw: OpenClaw: Shell positional parameters could weaken strict inline-eval checks CVE-2026-53859Mediumopenclaw: OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently CVE-2026-53848Lowopenclaw: OpenClaw: Exec allowlist could miss side effects from transparent command wrappers CVE-2026-53861Mediumopenclaw: OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags CVE-2026-53863Mediumopenclaw: OpenClaw: Tool group policy callers could accept unvalidated group IDs CVE-2026-53842Highopenclaw: OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution CVE-2026-53866Highopenclaw: OpenClaw: Shell inline-command parsing could miss an allowlist check CVE-2026-53843Highopenclaw: OpenClaw: Pairing-scoped device session could restore revoked node token authority CVE-2026-53864Highopenclaw: OpenClaw: Host environment sanitizer missed two Node.js control variables CVE-2026-53840Highopenclaw: OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin GHSA-CWJ3-VQPP-PMXRHighopenclaw: OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes CVE-2026-45004Highopenclaw: OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution CVE-2026-45005Mediumopenclaw: OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reload CVE-2026-43570Mediumopenclaw: OpenClaw contains a symlink traversal vulnerability GHSA-93RG-2XM5-2P9VMediumopenclaw: OpenClaw's Gateway Control UI bootstrap config required Gateway auth CVE-2026-44113Mediumopenclaw: OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes CVE-2026-44112Mediumopenclaw: OpenClaw: OpenShell FS bridge writes stay pinned to the sandbox mount root

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo