Filtered by vendor Openclaw
Subscribe
Total
473 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-41390 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 7.3 HIGH |
| OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap /usr/bin/script and similar wrappers before storing trust decisions. Attackers can obtain user approval for one wrapped command to persist trust for wrapper binaries that execute different underlying programs. | |||||
| CVE-2026-41388 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the application to rehydrate revoked Tlon configuration from file state, bypassing intended revocation controls. | |||||
| CVE-2026-41387 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 7.8 HIGH |
| OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in host-env-security-policy.json and host-env-security.ts that allows package-manager environment overrides. Attackers can exploit approved exec requests to redirect package resolution or runtime bootstrap to attacker-controlled infrastructure and execute trojanized content. | |||||
| CVE-2026-41912 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 7.6 HIGH |
| OpenClaw before 2026.4.8 contains a server-side request forgery policy bypass vulnerability allowing attackers to trigger navigations bypassing normal SSRF checks. Attackers can exploit browser interactions to bypass SSRF protections and access restricted resources. | |||||
| CVE-2026-41911 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit upload_file and upload_image endpoints to access files beyond the intended workspace-only filesystem policy. | |||||
| CVE-2026-41910 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 4.3 MEDIUM |
| OpenClaw before 2026.4.8 omits owner-only enforcement for cross-channel allowlist writes in the /allowlist endpoint. An authorized non-owner sender can bypass access controls to perform allowlist modifications against different channels, violating the intended trust model. | |||||
| CVE-2026-41408 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 4.3 MEDIUM |
| OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations. Attackers can exhaust disk space by downloading media files without triggering intended safety restrictions, causing availability impact. | |||||
| CVE-2026-41407 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 3.7 LOW |
| OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-length comparison helpers. Attackers can measure timing differences to leak secret-length information, weakening constant-time handling for shared secrets. | |||||
| CVE-2026-41406 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 5.4 MEDIUM |
| OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages. Attackers can exploit fetched quoted, root, and thread context messages to bypass sender allowlist restrictions and retrieve unauthorized content. | |||||
| CVE-2026-41405 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 7.5 HIGH |
| OpenClaw before 2026.3.31 parses MS Teams webhook request bodies before performing JWT validation, allowing unauthenticated attackers to trigger resource exhaustion. Remote attackers can send malicious Teams webhook payloads to exhaust server resources by bypassing authentication checks. | |||||
| CVE-2026-41404 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 8.8 HIGH |
| OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation. Attackers can exploit this by declaring operator scopes on non-Control-UI clients, allowing self-declared scopes to persist on identity-bearing authentication paths and escalate privileges. | |||||
| CVE-2026-41403 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 2.9 LOW |
| OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized access. Attackers can bypass access controls by sending proxied requests that are incorrectly identified as local loopback traffic, circumventing intended remote viewer restrictions. | |||||
| CVE-2026-41402 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 4.2 MEDIUM |
| OpenClaw before 2026.3.31 contains a scope bypass vulnerability in webhook replay cache deduplication that allows authenticated attackers to replay messages across sibling targets using the same messageId. Attackers can exploit overly broad cache keying to bypass replay protection and deliver duplicate webhook messages to unintended targets. | |||||
| CVE-2026-41400 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 5.3 MEDIUM |
| OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can send oversized pre-start WebSocket frames to cause resource consumption and denial of service. | |||||
| CVE-2026-41399 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 7.5 HIGH |
| OpenClaw before 2026.3.28 accepts unbounded concurrent unauthenticated WebSocket upgrades without pre-authentication budget allocation. Unauthenticated network attackers can exhaust socket and worker capacity to disrupt WebSocket availability for legitimate clients. | |||||
| CVE-2026-41398 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 4.6 MEDIUM |
| OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins. Attackers can inject unauthorized agent.request runs by loading attacker-controlled pages from local-network or tailnet hosts, polluting session state and consuming budget. | |||||
| CVE-2026-6011 | 1 Openclaw | 1 Openclaw | 2026-04-30 | 5.1 MEDIUM | 5.6 MEDIUM |
| A weakness has been identified in OpenClaw up to 2026.1.26. Affected by this issue is some unknown functionality of the file src/agents/tools/web-fetch.ts of the component assertPublicHostname Handler. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been made available to the public and could be used for attacks. Upgrading to version 2026.1.29 can resolve this issue. This patch is called b623557a2ec7e271bda003eb3ac33fbb2e218505. Upgrading the affected component is advised. | |||||
| CVE-2026-41913 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 3.7 LOW |
| OpenClaw before 2026.4.4 contains a race condition vulnerability in shared-secret authentication that allows concurrent asynchronous requests to bypass the per-key rate-limit budget. Attackers can exploit this by sending multiple simultaneous authentication attempts to circumvent intended rate-limiting protections on Tailscale-capable paths. | |||||
| CVE-2026-42431 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 8.1 HIGH |
| OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles. Attackers can exploit this path to circumvent the browser.request persistent profile-mutation guard and modify browser configurations. | |||||
| CVE-2026-42430 | 1 Openclaw | 1 Openclaw | 2026-04-30 | N/A | 6.5 MEDIUM |
| OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks. Attackers can exploit request-time navigation to reach private targets that should be restricted by browser SSRF protections. | |||||