openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-43576Mediumopenclaw: OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets CVE-2026-42438Mediumopenclaw: OpenClaw: Sender policy bypass in host media attachment reads allows unauthorized local file disclosure CVE-2026-43533Highopenclaw: OpenClaw: QQBot media tags could read arbitrary local files through reply text CVE-2026-43530Highopenclaw: OpenClaw: busybox and toybox applet execution weakened exec approval binding CVE-2026-42433Highopenclaw: OpenClaw: Matrix profile config persistence was reachable from operator.write message tools CVE-2026-42434Highopenclaw: OpenClaw: Sandboxed agents could escape exec routing via host=node override CVE-2026-43580Mediumopenclaw: OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage GHSA-QMWG-QPRG-3J38Mediumopenclaw: OpenClaw: Browser interaction routes could pivot into local CDP and regain file reads CVE-2026-43569Highopenclaw: OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins CVE-2026-43573Mediumopenclaw: OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement CVE-2026-42439Mediumopenclaw: OpenClaw: Browser tabs action select and close routes bypassed SSRF policy GHSA-F3H5-H452-VP3JMediumopenclaw: OpenClaw: Nostr profile mutation routes allowed operator.write config persistence GHSA-525J-HQQ2-66R4Highopenclaw: OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 CVE-2026-43571Highopenclaw: OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows CVE-2026-43567Mediumopenclaw: OpenClaw: screen_record outPath bypassed workspace-only filesystem guard CVE-2026-43527Mediumopenclaw: OpenClaw: Browser SSRF policy default allowed private-network navigation CVE-2026-43582Mediumopenclaw: OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding CVE-2026-43526Mediumopenclaw: OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes CVE-2026-43531Mediumopenclaw: OpenClaw: Workspace .env could inject OpenClaw runtime-control variables CVE-2026-43532Mediumopenclaw: OpenClaw: Discord event cover images bypassed sandbox media normalization CVE-2026-43574Mediumopenclaw: OpenClaw: Empty approver lists could grant explicit approval authorization CVE-2026-43534Mediumopenclaw: OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input CVE-2026-43584Highopenclaw: OpenClaw: Exec environment denylist missed high-risk interpreter startup variables CVE-2026-42435Mediumopenclaw: OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms CVE-2026-43568Mediumopenclaw: OpenClaw: Memory dreaming config persistence was reachable from operator.write commands

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo