openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-43572Lowopenclaw: OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks CVE-2026-43583Lowopenclaw: OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay GHSA-G375-H3V6-4873Mediumopenclaw: OpenClaw: Heartbeat owner downgrade missed local async exec completion events CVE-2026-42437Highopenclaw: OpenClaw: Voice-call realtime WebSocket accepted oversized frames CVE-2026-43566Mediumopenclaw: OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events CVE-2026-42436Mediumopenclaw: OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation CVE-2026-43528Highopenclaw: OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases CVE-2026-43535Mediumopenclaw: OpenClaw: Collect-mode queue batches could reuse the last sender authorization context GHSA-92JP-89MQ-4374Mediumopenclaw: OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials CVE-2026-43529Lowopenclaw: OpenClaw: TOCTOU read in exec script preflight CVE-2026-6011Lowopenclaw: OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts CVE-2026-41915Lowopenclaw: OpenClaw: GIT_DIR and related git plumbing env vars missing from exec env denylist (GHSA-m866-6qv5-p2fg variant)CVE-2026-42420Mediumopenclaw: OpenClaw: Multiple Code Paths Missing Base64 Pre-Allocation Size Checks CVE-2026-42428Mediumopenclaw: OpenClaw B-M3: ClawHub package downloads are not enforced with integrity verification CVE-2026-40037Highopenclaw: OpenClaw: `fetchWithSsrFGuard` replays unsafe request bodies across cross-origin redirects GHSA-W9J9-W4CP-6WGRMediumopenclaw: OpenClaw Host-Exec Environment Variable Injection CVE-2026-42430Mediumopenclaw: OpenClaw: Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable CVE-2026-42429Lowopenclaw: OpenClaw: Gateway plugin HTTP `auth: gateway` widens identity-bearing `operator.read` requests into runtime `operator.write`CVE-2026-41912Mediumopenclaw: OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation CVE-2026-42426Mediumopenclaw: OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval CVE-2026-41911Lowopenclaw: OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)CVE-2026-41914Mediumopenclaw: OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths CVE-2026-42421Mediumopenclaw: OpenClaw: Existing WS sessions survive shared gateway token rotation CVE-2026-41913Lowopenclaw: OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths CVE-2026-42432Highopenclaw: OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo