openclaw clawdbot vulnerabilities

2 published CVEs name openclaw clawdbot among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-26328
OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities
openclaw · openclaw
Medium6.5
CVE-2026-26317
OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints
openclaw · openclaw
High7.1

Most common weaknesses