Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins.Check if you run itEPSS 0.11%Apr 28, 2026
- High7.6OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchron…Check if you run itEPSS 0.47%Apr 28, 2026
- High8.2OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw UR…Check if you run itEPSS 0.15%Apr 28, 2026
- High8.8OpenClaw before 2026.3.31 contains an authentication bypass vulnerability where unauthenticated plugin-auth HTTP routes receive operator runtime write scopes.Check if you run itEPSS 0.29%Apr 28, 2026
- Medium5.9OpenClaw before 2026.3.31 contains a wide-area discovery vulnerability allowing arbitrary tailnet peers to be accepted as DNS authorities.Check if you run itEPSS 0.12%Apr 28, 2026
- Medium5.4OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations.Check if you run itEPSS 0.12%Apr 28, 2026
- Medium5.8OpenClaw before 2026.3.31 fails to properly sanitize PIP_INDEX_URL and UV_INDEX_URL environment variables in host execution contexts, allowing attackers to redirect Py…Check if you run itEPSS 0.13%Apr 28, 2026
- High7.0OpenClaw before 2026.3.28 contains an exec allowlist bypass vulnerability where allow-always persistence fails to unwrap /usr/bin/script and similar wrappers before st…Check if you run itEPSS 0.12%Apr 28, 2026
- Medium6.3OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values.Check if you run itEPSS 0.31%Apr 28, 2026
- High8.5OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in host-env-security-policy.json and host-env-security.ts that al…Check if you run itEPSS 0.24%Apr 28, 2026
- Critical9.1OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing.Check if you run itEPSS 0.33%Apr 28, 2026
- High7.1OpenClaw before 2026.3.31 stores Nostr privateKey as plaintext in configuration, allowing exposure through config.get method calls that bypass redaction mechanisms.Check if you run itEPSS 0.21%Apr 28, 2026
- High8.5OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows attackers to inject malicious environment vari…Check if you run itEPSS 0.14%Apr 28, 2026
- Medium6.1OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to delete remote directories by influencing remote…Check if you run itEPSS 0.37%Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord voice ingress that allows attackers to bypass channel and member allowlist restrictions.Check if you run itEPSS 0.22%Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allo…Check if you run itEPSS 0.22%Apr 28, 2026
- High7.0OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-always persistence to trust wrapper carrier exe…Check if you run itEPSS 0.12%Apr 28, 2026
- High7.1OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Talk Voice config…Check if you run itEPSS 0.24%Apr 28, 2026
- High7.7OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted ga…Check if you run itEPSS 0.45%Apr 28, 2026
- Medium5.1OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation.Check if you run itEPSS 0.23%Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders.Check if you run itEPSS 0.16%Apr 28, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints that fails to properly enforce operator.admin sc…Check if you run itEPSS 0.33%Apr 28, 2026
- Medium5.8OpenClaw before 2026.3.31 contains an incomplete host-env-security-policy.json that fails to restrict compiler binary environment variables, allowing untrusted models…Check if you run itEPSS 0.13%Apr 28, 2026
- High8.9Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint.Check if you run itEPSS 0.36%Apr 28, 2026
- Medium6.3NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplyi…Check if you run itEPSS 0.13%Apr 28, 2026
Sort