Medium
ghsa-9q2p-vc84-2rwm
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 601
Reset filters
Medium
ghsa-hfpr-jhpq-x4rm
OpenClaw: `operator.write` chat.send could reach admin-only config writes
Low
CVE-2026-27183
OpenClaw: system.run wrapper-depth boundary could skip shell approval gating
High
CVE-2026-32913
OpenClaw: fetch-guard forwards custom authorization headers across cross-origin redirects
Medium
ghsa-pjvx-rx66-r3fg
OpenClaw: Cross-account sender authorization expansion in `/allowlist ... --store` account scoping
Medium
ghsa-3h2q-j2v4-6w5r
OpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers
Medium
ghsa-j425-whc4-4jgc
OpenClaw's `system.run` env override filtering allowed dangerous helper-command pivots
Medium
ghsa-6rmx-gvvg-vh6j
OpenClaw's hooks count non-POST requests toward auth lockout
High
ghsa-rchv-x836-w7xp
OpenClaw's dashboard leaked gateway auth material via browser URL/query and localStorage
Medium
CVE-2026-22170
OpenClaw: BlueBubbles (optional plugin) pairing/allowlist mismatch when allowFrom is empty
Medium
ghsa-jjgj-cpp9-cvpv
OpenClaw Vulnerable to Local File Exfiltration via MCP Tool Result MEDIA: Directive Injection
High
ghsa-3jx4-q2m7-r496
OpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations
High
CVE-2026-3690
OpenClaw Canvas Authentication Bypass Vulnerability
Medium
CVE-2026-32002
OpenClaw's image tool bypasses tools.fs.workspaceOnly on sandbox mount paths and exfiltrates out-of-workspace images
Medium
CVE-2026-32019
OpenClaw has incomplete IPv4 special-use SSRF blocking in web fetch guard
Medium
ghsa-9mph-4f7v-fmvh
OpenClaw has agent avatar symlink traversal in gateway session metadata
Medium
ghsa-f6h3-846h-2r8w
OpenClaw's elevated allowFrom accepted broader identity signals than specified within sender-scoped authorization
Low
CVE-2026-32067
OpenClaw has cross-account DM pairing authorization bypass via unscoped pairing store access
Medium
ghsa-8cp7-rp8r-mg77
OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP
High
CVE-2026-32005
OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows
Medium
CVE-2026-32018
OpenClaw's serialize sandbox registry writes to prevent races and delete-rollback corruption
Medium
CVE-2026-32001
OpenClaw's Node role device-identity bypass allows unauthorized node.event injection
High
ghsa-2ch6-x3g4-7759
OpenClaw's commands.allowFrom sender authorization accepted conversation identifiers via ctx.From
Medium
CVE-2026-31995
OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.