openclaw vulnerabilities

Newest CVEs

• CVE-2026-110689

  OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism

  OpenClaw · ClawScan

  Medium4.8
• CVE-2026-101884

  OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override

  OpenClaw · OpenClaw Windows Node

  High7.7
• CVE-2026-101883

  OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present

  OpenClaw · OpenClaw Windows Node

  Medium5.3
• CVE-2026-101882

  OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set

  OpenClaw · OpenClaw Windows Node

  High8.7
• CVE-2026-101881

  OpenClaw Windows Node before 2026.7.1 Denial of Service

  OpenClaw · OpenClaw Windows Node

  High7.1
• CVE-2026-101880

  OpenClaw Windows Node before 2026.7.1 Authorization Bypass

  OpenClaw · OpenClaw Windows Node

  High8.7
• CVE-2026-101879

  OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

  OpenClaw · OpenClaw Windows Node

  High7.1
• CVE-2026-102807

  OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket

  OpenClaw · OpenClaw

  Medium6.0
• CVE-2026-102806

  OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines

  OpenClaw · OpenClaw

  Medium6.0
• CVE-2026-100604

  ClawHub Authentication Bypass via Former Publisher Skill Control

  openclaw · clawhub

  Medium5.3