openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-41355Mediumopenclaw: OpenClaw: OpenShell `mirror` mode can convert untrusted sandbox files into explicitly enabled workspace hooks and execute them on the host…CVE-2026-41359Highopenclaw: OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send GHSA-FWJQ-XWFJ-GV75Mediumopenclaw: OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations CVE-2026-41379Mediumopenclaw: OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send CVE-2026-41384Highopenclaw: OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config CVE-2026-41297Mediumopenclaw: OpenClaw: Marketplace Plugin Download Follows Redirects Without SSRF Protection CVE-2026-41408Mediumopenclaw: OpenClaw: Tlon media downloads can bypass core safety limits and exhaust disk CVE-2026-41375Mediumopenclaw: OpenClaw: `/phone arm`/`/phone disarm` Bypasses `operator.admin` Scope Check for External Channels CVE-2026-34425Mediumopenclaw: OpenClaw's complex interpreter pipelines could skip exec script preflight validation CVE-2026-34511Highopenclaw: OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter CVE-2026-41382Lowopenclaw: OpenClaw: Discord voice ingress authorization can be bypassed via channel, name, and stale-role validation gaps CVE-2026-41341Lowopenclaw: OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message CVE-2026-41300Mediumopenclaw: OpenClaw: Endpoint persists after trust decline, leaking gateway credentials CVE-2026-41403Mediumopenclaw: OpenClaw: diffs viewer misclassifies proxied remote requests as loopback when `allowRemoteViewer` is disabled CVE-2026-41348Lowopenclaw: OpenClaw: Discord Slash Commands Bypass Group DM Channel Allowlist CVE-2026-41393Highopenclaw: OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration GHSA-F693-58PC-2GFRMediumopenclaw: OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts CVE-2026-41388Lowopenclaw: OpenClaw: Tlon Startup Migration Rehydrates Empty-Array Revocations From File Config CVE-2026-41386Highopenclaw: OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing GHSA-H5HG-H7RR-GPF3Highopenclaw: OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection CVE-2026-41381Mediumopenclaw: OpenClaw: Discord voice manager bypasses channel-level member access allowlist CVE-2026-41331Mediumopenclaw: OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders CVE-2026-41378Highopenclaw: OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch CVE-2026-41296Criticalopenclaw: OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile CVE-2026-41400Mediumopenclaw: OpenClaw: Voice-call still parses large WebSocket frames before start validation (Incomplete fix for CVE-2026-32062)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo