Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8OpenClaw before 2026.4.8 contains a server-side request forgery policy bypass vulnerability allowing attackers to trigger navigations bypassing normal SSRF checks.Check if you run itEPSS 0.21%Apr 28, 2026
- Medium6.0OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries.Check if you run itEPSS 0.33%Apr 28, 2026
- Low2.3OpenClaw before 2026.4.8 omits owner-only enforcement for cross-channel allowlist writes in the /allowlist endpoint.Check if you run itEPSS 0.24%Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations.Check if you run itEPSS 0.34%Apr 28, 2026
- Medium6.3OpenClaw before 2026.4.2 contains a timing side channel vulnerability in shared-secret comparison call sites that use early length-mismatch checks instead of fixed-len…Check if you run itEPSS 0.23%Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages.Check if you run itEPSS 0.22%Apr 28, 2026
- High8.7OpenClaw before 2026.3.31 parses MS Teams webhook request bodies before performing JWT validation, allowing unauthenticated attackers to trigger resource exhaustion.Check if you run itEPSS 0.48%Apr 28, 2026
- High7.7OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation.Check if you run itEPSS 0.34%Apr 28, 2026
- Medium6.3OpenClaw before 2026.3.31 misclassifies proxied remote requests as loopback connections in the diffs viewer when allowRemoteViewer is disabled, allowing unauthorized access.Check if you run itEPSS 0.26%Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains a scope bypass vulnerability in webhook replay cache deduplication that allows authenticated attackers to replay messages across sib…Check if you run itEPSS 0.27%Apr 28, 2026
- Medium6.9OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation.Check if you run itEPSS 0.53%Apr 28, 2026
- High8.7OpenClaw before 2026.3.28 accepts unbounded concurrent unauthenticated WebSocket upgrades without pre-authentication budget allocation.Check if you run itEPSS 0.32%Apr 28, 2026
- Low2.1OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins.Check if you run itEPSS 0.11%Apr 28, 2026
- High7.6OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchron…Check if you run itEPSS 0.47%Apr 28, 2026
- High8.5OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_PLUGINS_DIR environment variable, compromising plugin trust verification.Check if you run itEPSS 0.13%Apr 28, 2026
- High8.2OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw UR…Check if you run itEPSS 0.15%Apr 28, 2026
- High8.8OpenClaw before 2026.3.31 contains an authentication bypass vulnerability where unauthenticated plugin-auth HTTP routes receive operator runtime write scopes.Check if you run itEPSS 0.29%Apr 28, 2026
- Medium5.9OpenClaw before 2026.3.31 contains a wide-area discovery vulnerability allowing arbitrary tailnet peers to be accepted as DNS authorities.Check if you run itEPSS 0.12%Apr 28, 2026
- Medium5.4OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations.Check if you run itEPSS 0.12%Apr 28, 2026
- Medium5.8OpenClaw before 2026.3.31 fails to properly sanitize PIP_INDEX_URL and UV_INDEX_URL environment variables in host execution contexts, allowing attackers to redirect Py…Check if you run itEPSS 0.13%Apr 28, 2026
- High7.0OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap /usr/bin/script and similar wrappers before st…Check if you run itEPSS 0.12%Apr 28, 2026
- Medium6.3OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values.Check if you run itEPSS 0.31%Apr 28, 2026
- High8.5OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in host-env-security-policy.json and host-env-security.ts that al…Check if you run itEPSS 0.24%Apr 28, 2026
- Critical9.1OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing.Check if you run itEPSS 0.33%Apr 28, 2026
- High7.1OpenClaw before 2026.3.31 stores Nostr privateKey as plaintext in configuration, allowing exposure through config.get method calls that bypass redaction mechanisms.Check if you run itEPSS 0.21%Apr 28, 2026
Sort