Openclaw

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparison

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY c

OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata c

OpenClaw 2026.4.23 before 2026.4.24 contains an insecure file permissions vulnerability in config recovery that restores

OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operators to weaken strict

OpenClaw before 2026.4.25 contains a privilege escalation vulnerability in internal and webchat command authentication t

OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to

OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing that allows authenticat

OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent

OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows aut

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly validates

OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wr

OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gate

OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files

OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through the affected dispatch

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows a

OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-scoped device session

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influ

OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe j

OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards

OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching host

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes

OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to va

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows

OpenClaw before 2026.5.6 contains a configuration enforcement bypass vulnerability in Feishu dynamic-agent bindings that

OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch slash commands that allow

OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows auth

OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that a

OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and

OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide com

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authentic

OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-con

OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes th

OpenClaw before 2026.4.7 contains an arbitrary file read vulnerability in the memory-wiki ingest feature that allows aut

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to contin

OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to mutable Sl

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between appro

OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or

OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path t

OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env

OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-own

OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with

OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allow

OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allo

OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly rece

OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state

OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authentica

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authe

OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redir