openclaw vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-41356Lowopenclaw: OpenClaw: Gateway `device.token.rotate` does not terminate active WebSocket sessions after credential rotation CVE-2026-41333Mediumopenclaw: OpenClaw: Fake DeviceToken Bypasses Shared Auth Rate Limiting CVE-2026-41369Highopenclaw: OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables GHSA-58Q2-7R52-JQ62Mediumopenclaw: OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read CVE-2026-41404Highopenclaw: OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode GHSA-F6PF-4GJX-C94RHighopenclaw: OpenClaw: Media Parsing Path Traversal Leads to Arbitrary File Read GHSA-V3QC-WRWX-J3PWHighopenclaw: OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`CVE-2026-41335Mediumopenclaw: OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability GHSA-RM5C-4RMF-VVHWMediumopenclaw: OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses GHSA-W85G-3H6X-4XH2Mediumopenclaw: OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS CVE-2026-41373Highopenclaw: OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides CVE-2026-41352Highopenclaw: OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md CVE-2026-41351Mediumopenclaw: OpenClaw: Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding CVE-2026-41330Mediumopenclaw: OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls CVE-2026-41374Mediumopenclaw: OpenClaw runs Discord audio preflight transcription before member authorization CVE-2026-41347Lowopenclaw: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode CVE-2026-41405Highopenclaw: OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion GHSA-57GH-M6RQ-54CFHighopenclaw: OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration GHSA-68V4-HMWV-F43HMediumopenclaw: OpenClaw: Media download follows cross-origin redirects with Authorization headers intact CVE-2026-41397Highopenclaw: OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal CVE-2026-41396Highopenclaw: OpenClaw: Workspace `.env` can override the bundled plugin trust root CVE-2026-41377Lowopenclaw: OpenClaw: Security Scan Failure Does Not Block Plugin Installation (Fail-Open)CVE-2026-41364Highopenclaw: OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host CVE-2026-41302Mediumopenclaw: OpenClaw: SSRF via Unguarded `fetch()` in Marketplace Plugin Download and Ollama Model Discovery GHSA-J9PV-RRCJ-6PFXMediumopenclaw: OpenClaw: SSH-based sandbox backends pass unsanitized process.env to child processes

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo