OpenClaw OpenClaw vulnerabilities

Newest CVEs

• CVE-2026-102807

  OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone Ticket

  OpenClaw · OpenClaw

  Medium6.0
• CVE-2026-102806

  OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines

  OpenClaw · OpenClaw

  Medium6.0
• CVE-2026-100599

  OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome

  OpenClaw · OpenClaw

  High8.7
• CVE-2026-100598

  OpenClaw before 2026.7.1 Approval Binding Logic Error

  OpenClaw · OpenClaw

  High7.5
• CVE-2026-100597

  OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

  OpenClaw · OpenClaw

  High8.8
• CVE-2026-100596

  OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration

  OpenClaw · OpenClaw

  High8.7
• CVE-2026-100595

  OpenClaw before 2026.7.1 Authorization Bypass via diagnostics

  OpenClaw · OpenClaw

  High7.1
• CVE-2026-100594

  OpenClaw before 2026.7.1 Authorization Bypass via trajectory export

  OpenClaw · OpenClaw

  High7.1
• CVE-2026-100593

  OpenClaw before 2026.7.1 Authentication Bypass via activation

  OpenClaw · OpenClaw

  Medium5.3
• CVE-2026-100592

  OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming

  OpenClaw · OpenClaw

  Medium5.3