Filtered by vendor Openclaw
Subscribe
Total
473 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-43583 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 5.3 MEDIUM |
| OpenClaw versions 2026.4.10 before 2026.4.14 fail to persist session context during delivery queue recovery for media replay. Attackers can exploit recovered queued outbound media to bypass group tool policy enforcement and weaken channel media restrictions after service restart or recovery. | |||||
| CVE-2026-43582 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 6.3 MEDIUM |
| OpenClaw before 2026.4.10 contains a server-side request forgery vulnerability in browser navigation policy that allows attackers to bypass hostname validation through DNS rebinding attacks. Attackers can exploit inconsistent hostname resolution between validation and actual network requests to pivot to internal resources via unallowlisted hostname URLs. | |||||
| CVE-2026-44114 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 7.8 HIGH |
| OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious workspaces can set variables like OPENCLAW_GIT_DIR to manipulate trusted OpenClaw runtime behavior during source-update or installer flows. | |||||
| CVE-2026-44115 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 8.8 HIGH |
| OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies. Attackers can bypass allowlist validation by embedding shell expansion tokens in heredoc bodies to execute unapproved commands at runtime. | |||||
| CVE-2026-44116 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 8.6 HIGH |
| OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can bypass SSRF protection by providing malicious photo URLs to the Zalo Bot API, enabling unauthorized access to internal resources. | |||||
| CVE-2026-44117 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 5.8 MEDIUM |
| OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation. Attackers can bypass SSRF protections by sending crafted image URLs to uploadC2CMedia and uploadGroupMedia endpoints to relay unintended requests. | |||||
| CVE-2026-44118 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 7.8 HIGH |
| OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers. Non-owner loopback clients can present themselves as owner to bypass owner-gated operations by manipulating the sender-owner header metadata. | |||||
| CVE-2026-43579 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile settings through unprotected mutation endpoints to gain unauthorized configuration persistence. | |||||
| CVE-2026-43578 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 9.1 CRITICAL |
| OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection misses local background async exec completion events. Attackers can exploit this by providing untrusted completion content to leave a run in a more privileged context than intended. | |||||
| CVE-2026-43577 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.4.9 contains a file read vulnerability allowing attackers to bypass navigation guards through browser act/evaluate interactions. Attackers can pivot into the local CDP origin and create or read disallowed file:// pages despite direct navigation policy restrictions. | |||||
| CVE-2026-43576 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 7.7 HIGH |
| OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted second-hop targets. The webSocketDebuggerUrl response field is not properly validated, enabling attackers to redirect connections to arbitrary hosts and perform SSRF-style attacks. | |||||
| CVE-2026-43575 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 9.8 CRITICAL |
| OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session credentials. Attackers can access the noVNC helper route without bridge authentication to gain unauthorized access to the interactive browser session. | |||||
| CVE-2026-43574 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. Attackers can resolve pending approvals without proper authorization by exploiting this logic flaw if they know an approval id. | |||||
| CVE-2026-43573 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 7.7 HIGH |
| OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement. | |||||
| CVE-2026-43572 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 5.3 MEDIUM |
| OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks. Attackers can bypass sender authorization by sending SSO invoke requests that are processed without proper validation, allowing unauthorized access to Teams SSO signin functionality. | |||||
| CVE-2026-43571 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 8.8 HIGH |
| OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugins. Attackers can exploit this by crafting malicious workspace plugins that bypass intended trust gates during setup-time plugin loading. | |||||
| CVE-2026-43570 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 6.5 MEDIUM |
| OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory. | |||||
| CVE-2026-43535 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 6.8 MEDIUM |
| OpenClaw before 2026.4.14 contains an authorization context reuse vulnerability in collect-mode queue batches that allows messages from different senders to inherit the final sender's authorization context. Attackers can exploit this by sending multiple queued messages to drain batches using a more privileged sender's context, causing earlier messages to execute with elevated permissions. | |||||
| CVE-2026-43531 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 7.3 HIGH |
| OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise application behavior. | |||||
| CVE-2026-43530 | 1 Openclaw | 1 Openclaw | 2026-05-07 | N/A | 8.8 HIGH |
| OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybox applet execution that allows attackers to obscure which applet would actually run. Attackers can exploit opaque multi-call binaries to bypass exec approval mechanisms and weaken risk classification of unsafe applet invocations. | |||||