High
CVE-2026-22168
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 601
Reset filters
Low
CVE-2026-31991
OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage
High
CVE-2026-31997
OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind
High
CVE-2026-31989
OpenClaw has web_search citation redirect SSRF via private-network-allowing policy
High
CVE-2026-32051
OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools
High
ghsa-7xmq-g46g-f8pv
OpenClaw: Sandbox media TOCTOU could read files outside sandbox root
High
ghsa-x82f-27x3-q89c
OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries
Critical
CVE-2026-31999
CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths
Medium
ghsa-8m9v-xpgf-g99m
OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization
Medium
CVE-2026-32048
OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns
Medium
CVE-2026-28461
OpenClaw has unbounded memory growth in Zalo webhook via query-string key churn (unauthenticated DoS)
Medium
ghsa-392f-ggf5-fp3c
OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists
High
CVE-2026-32041
OpenClaw: Browser control startup could continue unauthenticated after auth bootstrap failure
Medium
CVE-2026-32898
OpenClaw ACP client has permission auto-approval bypass via untrusted tool metadata
Medium
CVE-2026-4039
OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)
Critical
CVE-2026-28363
OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode
Medium
CVE-2026-27576
OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs
Medium
CVE-2026-27488
OpenClaw hardened cron webhook delivery against SSRF
Medium
CVE-2026-27485
OpenClaw: Reject symlinks in local skill packaging script
Low
CVE-2026-27484
OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows
Medium
CVE-2026-4040
OpenClaw safeBins file-existence oracle information disclosure
Low
CVE-2026-31996
OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags
High
CVE-2026-32060
OpenClaw has a path traversal in apply_patch could write/delete files outside the workspace
High
CVE-2026-28479
OpenClaw replaced a deprecated sandbox hash algorithm
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.