---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.5.18
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A path traversal vulnerability exists in OpenClaw, allowing authenticated attackers to access or manipulate restricted files through improper glob matching.

Executive Summary:
An improper path validation vulnerability in OpenClaw exposes the application to path traversal attacks, potentially leading to unauthorized data access.

Vulnerability Details

CVE-ID: CVE-2026-62229

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.5.18

Vulnerability: This vulnerability involves improper limitation of a pathname to a restricted directory (CWE-22), specifically triggered by flaws in glob matching logic. The vulnerability requires the attacker to have low-level privileges (PR:L) to initiate the traversal.

Business Impact

The ability to perform path traversal can enable an attacker to read sensitive configuration files or access restricted system directories. This unauthorized access compromises the confidentiality and integrity of the application environment. Given the High CVSS score of 8.8, the business risk includes potential data exfiltration and the compromise of sensitive credentials stored within the application path.

Remediation Plan

Immediate Action: Upgrade OpenClaw to version 2026.5.18 or higher to resolve the path validation flaw.

Proactive Monitoring: Inspect server logs for evidence of directory traversal attempts, such as requests containing sequences like ../ or unexpected glob pattern characters in file paths.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block malicious path traversal attempts and restrict file system access permissions for the application service user.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The issue arises from insufficient sanitization of input paths.

Analyst Recommendation

Organizations should treat this path traversal vulnerability with high urgency. Applying the vendor-provided update is the only effective way to remediate this flaw and prevent unauthorized access to sensitive system resources.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is affected by an incorrect authorization vulnerability that may allow authenticated users to perform unauthorized actions.

Executive Summary:
An incorrect authorization vulnerability in OpenClaw allows authenticated attackers to bypass security constraints and potentially compromise system integrity.

Vulnerability Details

CVE-ID: CVE-2026-62228

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.5

Vulnerability: The application suffers from an incorrect authorization flaw (CWE-863) within the node execution approval process. The CVSS vector indicates that while the attack is network-based, it requires low privileges (PR:L) and specific authorization pathing to exploit.

Business Impact

Successful exploitation of this vulnerability could allow an authenticated attacker to execute unauthorized operations within the application environment. This may lead to a full compromise of system data or unauthorized modification of critical configurations, resulting in significant operational disruption. With a CVSS score of 8.8, this vulnerability is classified as High severity and requires immediate attention to prevent privilege escalation or unauthorized administrative actions.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.5 or later to apply the necessary authorization checks.

Proactive Monitoring: Review application access logs for unusual patterns involving node execution requests or administrative approvals by standard user accounts.

Compensating Controls: Ensure that access to the management interface is restricted to trusted networks and implement strict role-based access control (RBAC) policies to minimize the potential impact of unauthorized account usage.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its impact on system authorization logic.

Analyst Recommendation

Given the High severity of this authorization flaw, administrators should prioritize patching to version 2026.6.5 immediately. Failure to address this vulnerability exposes the environment to potential unauthorized command execution by internal or compromised user accounts.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.4.14 up to (excluding) 2026.5.26
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A server-side request forgery (SSRF) vulnerability in the browser snapshot feature of OpenClaw allows an authenticated user to perform unauthorized requests.

Executive Summary:
An authenticated SSRF vulnerability in the OpenClaw browser snapshot functionality poses a risk of unauthorized internal network access.

Vulnerability Details

CVE-ID: CVE-2026-62227

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.4.14 up to (excluding) 2026.5.26

Vulnerability: This is a server-side request forgery (CWE-918) vulnerability triggered by the browser snapshot feature. An authenticated attacker can manipulate the application to make requests to unintended targets.

Business Impact

The ability to perform SSRF allows an attacker to bypass perimeter security and interact with internal services that are otherwise unreachable. Given the CVSS score of 7.7, this vulnerability facilitates potential unauthorized access to internal data and infrastructure, undermining the security posture of the host environment.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.26 or later to mitigate the vulnerability.

Proactive Monitoring: Monitor for anomalous traffic patterns originating from the OpenClaw server, specifically targeting internal IP addresses or sensitive local services.

Compensating Controls: Use a Web Application Firewall (WAF) to validate and restrict requested URLs if immediate patching is not feasible.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SSRF vulnerabilities are highly dependent on the target environment's network configuration and internal service availability.

Analyst Recommendation

This vulnerability represents a significant risk to internal network integrity. It is recommended to apply the vendor-provided security update to version 2026.5.26 without delay to prevent potential exploitation.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.3.28 up to (excluding) 2026.5.19
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A Server-Side Request Forgery vulnerability in OpenClaw allows authenticated attackers to perform unauthorized requests.

Executive Summary:
OpenClaw is vulnerable to a Server-Side Request Forgery flaw that could allow an authenticated attacker to perform unauthorized actions within the network.

Vulnerability Details

CVE-ID: CVE-2026-62226

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.3.28 up to (excluding) 2026.5.19

Vulnerability: This vulnerability is categorized as a Server-Side Request Forgery (CWE-918). It requires the attacker to have low-level privileges to successfully execute the request against the backend infrastructure.

Business Impact

The exploitation of this vulnerability could lead to unauthorized access to internal services or resources that are otherwise protected from the public internet. Given the CVSS score of 8.5, this high-severity flaw poses a significant risk to the integrity of internal network communications and could lead to data exfiltration if internal endpoints are compromised.

Remediation Plan

Immediate Action: Upgrade OpenClaw to version 2026.5.19 or later to incorporate the vendor-supplied security patch.

Proactive Monitoring: Review access logs for suspicious outbound requests originating from the application server, particularly those directed toward internal IP addresses or sensitive metadata services.

Compensating Controls: Implement strict egress filtering on the firewall to prevent the application server from initiating connections to unauthorized internal or external network segments.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability relies on the attacker possessing legitimate, albeit low-level, credentials to trigger the SSRF condition.

Analyst Recommendation

Organizations utilizing OpenClaw must prioritize the upgrade to version 2026.5.19 to remediate this SSRF vulnerability. Failure to patch leaves the internal network perimeter exposed to lateral movement and unauthorized service interaction.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.5.18
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An incorrect authorization vulnerability in OpenClaw allows authenticated users to bypass security checks during the device pairing process.

Executive Summary:
An incorrect authorization flaw in OpenClaw enables authenticated users to bypass security restrictions during device pairing, posing a high risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-62223

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.5.18

Vulnerability: This vulnerability is categorized as CWE-863, representing an incorrect authorization flaw. An authenticated user with low privileges can manipulate the device pairing process because the application performs insufficient validation of the user's authorization level during this specific operation.

Business Impact

Successful exploitation allows unauthorized entities to pair devices with the system, leading to potential unauthorized data access or control over system resources. The CVSS score of 8.8 underscores the severity of this vulnerability, as it compromises the core authorization logic governing how new devices are integrated into the trusted environment.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.18 or newer to resolve the authorization logic error.

Proactive Monitoring: Review security logs for irregular device pairing requests or unauthorized access attempts from standard user accounts.

Compensating Controls: Restrict access to the device management interface to trusted internal networks only until the security patch is verified and applied.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability represents a failure in the application's permission enforcement layer.

Analyst Recommendation

Organizations should prioritize upgrading to the latest version of OpenClaw to remediate this authorization defect. Failure to patch leaves the system vulnerable to unauthorized device pairing, which could be used as a vector for further network exploitation.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.5.22
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw contains a vulnerability where it improperly loads untrusted plugins during setup mode, potentially leading to arbitrary code execution on the host.

Executive Summary:
A vulnerability in OpenClaw allows for the execution of untrusted plugins, which could result in a complete compromise of the affected host system.

Vulnerability Details

CVE-ID: CVE-2026-62222

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.5.22

Vulnerability: This issue is identified as CWE-829, involving the inclusion of functionality from an untrusted control sphere. The application fails to properly validate plugins when operating in setup mode, allowing an attacker to force the execution of malicious code.

Business Impact

Exploitation of this vulnerability grants an attacker the ability to execute code with the privileges of the user running OpenClaw. The CVSS score of 7.8 underscores the severity of this risk, as it can lead to unauthorized data access, system manipulation, and potential lateral movement within the network. Organizations must treat this as a high-priority update to ensure the security of their development and production environments.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.22 or later to ensure that plugin loading is restricted to trusted sources.

Proactive Monitoring: Review application logs for unauthorized plugin registration or unexpected changes to the configuration files governing setup mode.

Compensating Controls: Disable setup mode when not actively required and ensure that the application is executed with the principle of least privilege to minimize potential damage.

Exploitation Status

Public Exploit Available: No (exploit_available: unknown)

Analyst Notes: As of July 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The risk is primarily associated with the trust model of the setup process, which can be abused to execute malicious payloads.

Analyst Recommendation

Administrators should prioritize upgrading to version 2026.5.22 to eliminate this vulnerability. By ensuring that only verified plugins can be loaded, organizations can significantly reduce the risk of arbitrary code execution and maintain the integrity of their deployments.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.1.20 up to (excluding) 2026.5.27
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A missing authorization flaw in OpenClaw allows authenticated users to bypass security controls during the device pairing approval process.

Executive Summary:
A missing authorization vulnerability in OpenClaw permits authenticated users to perform unauthorized device pairing actions, creating a significant security bypass risk.

Vulnerability Details

CVE-ID: CVE-2026-62218

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.1.20 up to (excluding) 2026.5.27

Vulnerability: This vulnerability is categorized as CWE-862, which involves missing authorization. The application fails to perform required capability checks for authenticated users when invoking the device pairing approval function, enabling unauthorized access.

Business Impact

This flaw poses a high risk to business operations by allowing unauthorized devices to be paired with the system, potentially facilitating man-in-the-middle attacks or data exfiltration. With a CVSS score of 8.8, the vulnerability threatens the confidentiality and integrity of the environment by bypassing critical security boundaries that should restrict administrative or pairing actions to authorized personnel only.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.27 or later to ensure that proper authorization checks are enforced for device pairing.

Proactive Monitoring: Audit device pairing logs for anomalous activity or unrecognized devices being added to the infrastructure.

Compensating Controls: Use network-level segmentation or monitoring to detect and block unauthorized device attempts if immediate patching is not feasible.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The inherent risk is elevated due to the direct impact on system trust and device management.

Analyst Recommendation

Given the potential for unauthorized device integration, organizations must treat this vulnerability with high urgency. Applying the vendor-provided update is the most effective way to restore authorization controls and prevent unauthorized system access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.5.14-beta.1 up to (excluding) 2026.5.27
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in OpenClaw allows authenticated users to perform unauthorized actions via incorrect authorization checks in the execution approval function.

Executive Summary:
An incorrect authorization flaw in OpenClaw could allow authenticated attackers to bypass security controls and perform unauthorized operations.

Vulnerability Details

CVE-ID: CVE-2026-62217

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.5.14-beta.1 up to (excluding) 2026.5.27

Vulnerability: This vulnerability is categorized as CWE-863, which involves incorrect authorization. An authenticated attacker with low privileges can exploit this flaw to execute unauthorized operations, as the application fails to properly validate the user's permissions during specific approval processes.

Business Impact

The exploitation of this vulnerability could lead to significant unauthorized access to sensitive system functions, potentially resulting in data manipulation or administrative compromise. With a CVSS score of 8.8, this high-severity flaw represents a substantial risk to operational integrity, as it allows attackers to escalate their capabilities beyond their intended scope.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.27 or higher to incorporate the necessary authorization fixes.

Proactive Monitoring: Review system access logs for unusual patterns of approval requests or unauthorized function calls originating from low-privileged accounts.

Compensating Controls: Implement strict Web Application Firewall rules to monitor and limit access to administrative or sensitive approval endpoints until the patch is deployed.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's exploitability is limited by the requirement for a low-privileged authenticated session.

Analyst Recommendation

The high CVSS score reflects the serious potential for unauthorized privilege usage within the application. Administrators should prioritize updating to the fixed version immediately to prevent potential abuse of the authorization mechanism by malicious insiders or compromised user accounts.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is susceptible to an authentication bypass vulnerability due to insufficient verification of data authenticity, potentially allowing unauthenticated access to sensitive functionality.

Executive Summary:
A vulnerability in OpenClaw allows unauthenticated actors to bypass security controls, posing a significant risk to data integrity and system security.

Vulnerability Details

CVE-ID: CVE-2026-62215

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.5

Vulnerability: This vulnerability, classified as CWE-345, arises from insufficient verification of data authenticity. It permits an unauthenticated attacker to bypass intended security checks during interaction with the application.

Business Impact

The exploitation of this flaw could result in complete unauthorized access to protected system functions. Given the CVSS score of 8.0, this represents a high-severity risk that could lead to significant data compromise or the manipulation of system operations. Organizations relying on OpenClaw for critical workflows should prioritize remediation to prevent potential service disruption or unauthorized data exposure.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.5 or later to resolve the underlying authentication verification flaw.

Proactive Monitoring: Review system access logs for irregular authentication patterns or unexpected API calls originating from unknown sources.

Compensating Controls: Implement strict network access controls or a Web Application Firewall to filter traffic and restrict access to the vulnerable interface until the update is deployed.

Exploitation Status

Public Exploit Available: No (exploit_available: unknown)

Analyst Notes: As of July 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent exploitability is limited by the requirement for specific interaction, but the impact remains critical.

Analyst Recommendation

The vulnerability presents a substantial risk due to the potential for unauthorized access. Administrators must move to update the software to version 2026.6.5 immediately. Failure to apply this patch leaves the system exposed to potential exploitation by unauthenticated actors.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.5.10 up to (excluding) 2026.6.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is susceptible to an incorrect authorization vulnerability, allowing authenticated users with low privileges to bypass authorization checks.

Executive Summary:
An authorization bypass vulnerability in OpenClaw could allow authenticated attackers to perform unauthorized actions, posing a significant risk to data integrity.

Vulnerability Details

CVE-ID: CVE-2026-62209

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.5.10 up to (excluding) 2026.6.5

Vulnerability: This is an incorrect authorization flaw (CWE-863) that occurs during agent mode dispatch. The vulnerability requires the attacker to have low-level authenticated access to the system to exploit the authorization check failure.

Business Impact

Successful exploitation allows an authenticated attacker to manipulate sensitive data or perform actions beyond their assigned permissions. Given the CVSS score of 8.1, this vulnerability presents a high risk to business operations by undermining access control mechanisms, which could lead to unauthorized data modification or administrative control over affected workflows.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.5 or later to resolve the authorization logic flaw.

Proactive Monitoring: Monitor system access logs for unusual activity or unauthorized attempts to access administrative endpoints by low-privileged user accounts.

Compensating Controls: Ensure that the application is deployed behind a robust Web Application Firewall (WAF) configured to inspect and restrict anomalous requests directed at dispatch functions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any user with a standard account due to the failure of the underlying authorization mechanism.

Analyst Recommendation

This high-severity vulnerability requires immediate attention to prevent privilege escalation and unauthorized data manipulation. Administrators must prioritize updating to version 2026.6.5 to ensure that authorization controls are correctly enforced for all user roles.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in administrative tools, allowing authenticated users to perform unauthorized administrative actions.

Executive Summary:
A missing authorization flaw in OpenClaw administrative tools allows authenticated users to bypass security checks and perform restricted operations.

Vulnerability Details

CVE-ID: CVE-2026-62207

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.5

Vulnerability: This vulnerability involves missing authorization (CWE-862) within the administrative toolset. An attacker with standard user privileges can circumvent intended access restrictions to perform administrative-level functions.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a severe threat to the security of the entire application. Successful exploitation allows unauthorized administrative access, which can lead to full system takeover, data exfiltration, or complete loss of service.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.5 or later to enforce correct authorization checks across all administrative endpoints.

Proactive Monitoring: Review audit logs for administrative actions initiated by non-administrative user accounts.

Compensating Controls: Restrict access to administrative tool interfaces at the network level using firewalls or VPNs until the patch is applied.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is dangerous as it effectively grants administrative privileges to unauthorized users.

Analyst Recommendation

This is a critical security gap that undermines the core authorization model of the software. All instances of OpenClaw must be updated to version 2026.6.5 or newer to ensure that administrative actions are properly protected from unauthorized access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw versions prior to 2026.6.6 are vulnerable to environment variable injection via rustup, potentially allowing authenticated users to compromise system integrity.

Executive Summary:
An environment variable injection vulnerability in OpenClaw allows authenticated attackers to execute unauthorized commands or manipulate system behavior.

Vulnerability Details

CVE-ID: CVE-2026-62203

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.6

Vulnerability: This is an input validation issue categorized as an incomplete list of disallowed inputs (CWE-184). An authenticated attacker can exploit this to inject malicious environment variables into the rustup build process.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting its potential for high impact on data and system integrity. An attacker could influence the application environment to bypass security controls or execute arbitrary code, resulting in unauthorized access to sensitive data.

Remediation Plan

Immediate Action: Update to OpenClaw version 2026.6.6 or later to ensure proper sanitization of input variables.

Proactive Monitoring: Monitor application logs for unusual environment configurations or suspicious calls to build-related processes.

Compensating Controls: Apply strict environment variable isolation and utilize containerization or sandboxing to limit the impact of process-level injections.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable if the attacker can influence the environment variables passed to the target process.

Analyst Recommendation

Given the high CVSS score and the nature of environment injection, this flaw should be addressed immediately. Organizations should verify their current version and update to 2026.6.6 to eliminate the injection vector.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.6.1 up to (excluding) 2026.6.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw 2026.6.1 through 2026.6.8 is susceptible to incorrect authorization, allowing authenticated users to perform unauthorized actions via cron jobs.

Executive Summary:
An authorization vulnerability in OpenClaw allows authenticated attackers to escalate privileges via cron jobs, posing a high risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-62202

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.6.1 up to (excluding) 2026.6.9

Vulnerability: The application suffers from an incorrect authorization flaw (CWE-863). The attack requires low-privileged authenticated access to trigger the malicious cron execution.

Business Impact

Successful exploitation allows an authenticated attacker to perform unauthorized actions with elevated privileges. Given the CVSS score of 8.8, this vulnerability presents a significant risk to data confidentiality and integrity, potentially leading to full system compromise if administrative cron tasks are manipulated.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.9 or later to resolve the authorization logic error.

Proactive Monitoring: Review system cron logs and scheduled task configurations for unexpected entries or unauthorized execution patterns.

Compensating Controls: Implement strict file system permissions on cron job directories and restrict user access to administrative scheduling tools.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the potential for privilege escalation via scheduled tasks.

Analyst Recommendation

This vulnerability represents a high-severity risk to the OpenClaw environment. Administrators must prioritize updating to version 2026.6.9 immediately to prevent potential privilege escalation and unauthorized system modifications.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A server-side request forgery (SSRF) vulnerability in OpenClaw allows an authenticated user to bypass network policies via the execution server.

Executive Summary:
An authenticated SSRF vulnerability in OpenClaw could allow attackers to bypass network security controls and perform unauthorized requests.

Vulnerability Details

CVE-ID: CVE-2026-62201

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.6

Vulnerability: This is a server-side request forgery (CWE-918) vulnerability occurring in the execution server component. It requires the attacker to be an authenticated user with low privileges to trigger the request.

Business Impact

An SSRF vulnerability can be leveraged to probe internal network resources, bypass firewalls, or interact with services not intended for public access. With a CVSS score of 7.7, this represents a significant risk to internal network segmentation and could lead to unauthorized data exposure or interaction with sensitive internal infrastructure.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.6 or later to apply the necessary security fixes.

Proactive Monitoring: Review web server and application logs for unusual outbound requests or attempts to access internal-only network endpoints.

Compensating Controls: Implement strict egress filtering on the server hosting OpenClaw to prevent unauthorized connections to internal or sensitive external network ranges.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SSRF vulnerabilities often provide the initial foothold for more complex lateral movement within a network.

Analyst Recommendation

Addressing this SSRF vulnerability is critical for maintaining internal network security. Administrators should verify their current version and deploy the update to 2026.6.6 immediately.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw contains an authentication bypass vulnerability stemming from an incomplete list of disallowed inputs within the Git external transport functionality.

Executive Summary:
A critical authentication bypass in OpenClaw's Git transport mechanism allows low-privileged users to circumvent security controls.

Vulnerability Details

CVE-ID: CVE-2026-62200

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.6

Vulnerability: This vulnerability is identified as CWE-184 (Incomplete List of Disallowed Inputs). The Git external transport implementation fails to sufficiently validate input, allowing an authenticated user to bypass intended authorization constraints.

Business Impact

Exploitation of this flaw grants unauthorized access to internal systems via the Git transport layer. Given the CVSS score of 8.8, this represents a significant threat to internal repository integrity and could lead to the unauthorized retrieval or modification of source code and sensitive project data.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.6 or higher, which addresses the input validation shortcomings in the Git transport logic.

Proactive Monitoring: Review access logs associated with Git transport operations for anomalous command execution or unauthorized connection attempts.

Compensating Controls: Restrict access to Git transport services to trusted networks and ensure that all Git-related traffic is routed through secure, inspected channels.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability highlights a common failure mode where input validation lists are insufficient to handle all possible malicious input variations.

Analyst Recommendation

Organizations utilizing OpenClaw's Git transport features must prioritize the update to version 2026.6.6. Addressing this authentication bypass is essential to preventing unauthorized system access and ensuring the continued integrity of stored project data.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is vulnerable to an authentication bypass caused by an incomplete list of disallowed inputs within the application's environment filtering mechanism.

Executive Summary:
An authentication bypass flaw in OpenClaw allows attackers with low privileges to circumvent security filters and potentially gain unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-62199

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.6

Vulnerability: This issue is classified as CWE-184 (Incomplete List of Disallowed Inputs). By providing specific inputs that the filtering mechanism fails to block, an authenticated user can bypass security checks, leading to unauthorized access.

Business Impact

The ability to bypass authentication mechanisms is a critical risk that undermines the entire security posture of the OpenClaw platform. With a CVSS score of 8.8, this vulnerability allows for unauthorized data access and potential lateral movement, which could lead to significant data breaches or loss of sensitive organizational information.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.6 or higher to ensure the environment filtering logic is correctly implemented.

Proactive Monitoring: Monitor system logs for repeated failed authentication attempts or suspicious input patterns that may indicate an attempt to bypass security filters.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to inspect and block malformed requests that target the application's environment configuration.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The reliance on an incomplete blocklist (CWE-184) makes this vulnerability inherently prone to bypass if the filtering logic is not strictly maintained.

Analyst Recommendation

Immediate remediation is required to close this authentication bypass vector. Administrators must apply the version 2026.6.6 update immediately to prevent unauthorized actors from circumventing core security controls.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is susceptible to a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated users to bypass security policies via CDP discovery.

Executive Summary:
A Server-Side Request Forgery (SSRF) vulnerability in OpenClaw allows authenticated users to bypass security policies, potentially leading to unauthorized internal network interactions.

Vulnerability Details

CVE-ID: CVE-2026-62197

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.6

Vulnerability: This is a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that occurs during CDP discovery. The vulnerability requires the attacker to have low-level privileges (authenticated access) to trigger the flaw.

Business Impact

SSRF vulnerabilities can allow an attacker to make requests to internal services that are not typically accessible from the outside, potentially leading to information disclosure or unauthorized actions within the internal network. With a CVSS score of 8.5, this high-severity vulnerability could be leveraged to gain further access into the infrastructure, undermining the security posture of the host environment.

Remediation Plan

Immediate Action: Upgrade OpenClaw to version 2026.6.6 or later to remediate the SSRF vulnerability.

Proactive Monitoring: Monitor internal network traffic originating from the server hosting OpenClaw for unusual outbound requests, especially those targeting internal-only infrastructure or services.

Compensating Controls: Implement strict egress filtering on the server to prevent it from making unauthorized requests to sensitive internal network segments.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is technically significant, but requires an authenticated user to initiate the request.

Analyst Recommendation

Given the potential for SSRF to be used as a pivot point for further internal network attacks, administrators should prioritize updating to the patched version, 2026.6.6. Ensure that the update is tested in a staging environment before deployment to production systems.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.5.20 up to (excluding) 2026.6.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw contains an authorization bypass vulnerability via MCP loopback, allowing authenticated users to perform unauthorized actions with elevated privileges.

Executive Summary:
An authorization bypass flaw in OpenClaw versions 2026.5.20 to 2026.6.5 enables authenticated users to gain unauthorized access to critical resources.

Vulnerability Details

CVE-ID: CVE-2026-62195

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.5.20 up to (excluding) 2026.6.6

Vulnerability: The vulnerability is categorized as an Incorrect Permission Assignment for Critical Resource (CWE-732). It allows an authenticated user to bypass authorization checks via an MCP loopback mechanism, leading to potential unauthorized data access or modification.

Business Impact

Successful exploitation results in unauthorized access to sensitive data or critical system functions, posing a high risk to data integrity and confidentiality. Given the CVSS score of 8.3, this flaw enables a low-privileged user to escalate their capabilities, which could lead to severe organizational data breaches or unauthorized system control.

Remediation Plan

Immediate Action: Upgrade the OpenClaw instance to version 2026.6.6 or later to ensure the proper authorization logic is enforced.

Proactive Monitoring: Review application and system access logs for anomalous patterns or unexpected privileged actions performed by standard users.

Compensating Controls: Ensure that the application is not exposed to untrusted networks and utilize strict identity and access management (IAM) policies to limit the potential blast radius of compromised accounts.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability's technical nature suggests it is a logical flaw that can be reliably triggered by authenticated users.

Analyst Recommendation

This is a high-severity authorization bypass issue that requires immediate attention. Security teams must verify their current version of OpenClaw and apply the 2026.6.6 update as soon as possible to prevent unauthorized access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.5.20 up to (excluding) 2026.6.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is susceptible to privilege escalation due to incorrect permission assignments and missing authorization checks during plugin installation.

Executive Summary:
A vulnerability in OpenClaw allows authenticated users to perform unauthorized privilege escalation, posing a significant risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-62194

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.5.20 up to (excluding) 2026.6.9

Vulnerability: This vulnerability involves CWE-732 (Incorrect Permission Assignment for Critical Resource) and CWE-862 (Missing Authorization). An attacker with low privileges (PR:L) can leverage these flaws to bypass security controls and escalate their access level.

Business Impact

Successful exploitation of this vulnerability could lead to a complete compromise of the application's administrative functions. With a CVSS score of 8.8, this high-severity flaw enables unauthorized actors to install malicious plugins, potentially leading to full system takeover and unauthorized data modification.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.9 or later to incorporate the necessary authorization checks.

Proactive Monitoring: Review administrative access logs for unusual plugin installation activity or unexpected user privilege elevation events.

Compensating Controls: Implement strict Network Access Control (NAC) and monitor for unauthorized attempts to access the plugin installation interface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous as it impacts critical authorization logic required to maintain the separation of privileges.

Analyst Recommendation

Given the high CVSS score of 8.8, organizations should prioritize updating their OpenClaw instances to version 2026.6.9. Failure to patch may allow malicious actors to gain unauthorized elevated privileges, resulting in severe operational and security degradation.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.6.6 up to (excluding) 2026.6.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The OpenClaw platform contains an incorrect authorization vulnerability that allows authenticated users to trigger unauthorized state changes.

Executive Summary:
An incorrect authorization flaw in OpenClaw allows authenticated attackers to perform unauthorized operations, potentially leading to critical system impacts.

Vulnerability Details

CVE-ID: CVE-2026-62192

Affected Software: OpenClaw OpenClaw

Affected Versions: 2026.6.6 up to (excluding) 2026.6.9

Vulnerability: This is an incorrect authorization vulnerability (CWE-863) where an authenticated user can bypass intended security constraints to perform unauthorized write or administrative actions.

Business Impact

The ability for an authenticated user to bypass authorization logic can lead to severe operational disruptions or unauthorized system changes. With a CVSS score of 8.1, this vulnerability poses a high risk to the stability and security of the affected environment.

Remediation Plan

Immediate Action: Upgrade the OpenClaw software to version 2026.6.9 or later.

Proactive Monitoring: Review audit logs for suspicious activity originating from authenticated user accounts, specifically focusing on unauthorized configuration or data modification attempts.

Compensating Controls: Restrict access to the application via network-level controls or WAF rules to limit exposure while the update is being prepared.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable for any authenticated user, making timely patching essential.

Analyst Recommendation

Organizations utilizing OpenClaw must treat this vulnerability with high urgency. Applying the provided update to version 2026.6.9 is the only effective way to remediate the underlying authorization bypass and secure the application against authenticated attackers.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw versions before 2026.6.9 are vulnerable to authorization bypass due to incorrect name resolution and improper handling of security references.

Executive Summary:
An authorization bypass vulnerability in OpenClaw allows authenticated users to escalate privileges or perform unauthorized actions by exploiting name resolution flaws.

Vulnerability Details

CVE-ID: CVE-2026-62190

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.9

Vulnerability: The software exhibits incorrect authorization (CWE-863) and issues with incorrectly resolved references (CWE-706). An authenticated attacker can leverage these flaws to bypass intended security constraints and execute privileged operations.

Business Impact

This vulnerability allows authenticated users to exceed their authorized access levels, which could lead to unauthorized data modification, system configuration changes, or full administrative takeover. With a CVSS score of 8.8, the potential for lateral movement and system-wide impact is substantial, particularly in multi-user or shared environments.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.6.9 or later immediately to resolve the identified authorization flaws.

Proactive Monitoring: Review audit logs for unusual activities performed by standard users, particularly those involving administrative functions or sensitive system references.

Compensating Controls: Implement the principle of least privilege by restricting user access to only the minimum necessary functions required for their role until the update is applied.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable for authenticated users, making it a critical risk for internal security.

Analyst Recommendation

The urgency of this update is high. System administrators should verify the current version of OpenClaw and apply the 2026.6.9 patch to close the authorization bypass gap and prevent privilege escalation.

---METADATA---
VENDOR: OpenClaw
PRODUCT: feishu
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The @openclaw/feishu package contains an incorrect authorization vulnerability that allows authenticated users to perform unauthorized actions.

Executive Summary:
An incorrect authorization flaw in the OpenClaw feishu package allows authenticated attackers to bypass security controls, posing a high risk to data integrity.

Vulnerability Details

CVE-ID: CVE-2026-62188

Affected Software: OpenClaw feishu

Affected Versions: 0 up to (excluding) 2026.6.9

Vulnerability: This vulnerability is categorized as CWE-863 (Incorrect Authorization). It permits an authenticated user with low privileges to perform unauthorized actions, potentially leading to unauthorized data modification or access.

Business Impact

Successful exploitation of this vulnerability could lead to significant data compromise or unauthorized administrative actions within the application. Given the CVSS score of 8.1, this represents a high-severity risk that could undermine the integrity and confidentiality of business processes supported by the feishu component.

Remediation Plan

Immediate Action: Update the @openclaw/feishu package to version 2026.6.9 or later.

Proactive Monitoring: Monitor application logs for unusual API calls or unauthorized attempts to access restricted functions by standard user accounts.

Compensating Controls: Implement strict role-based access control (RBAC) and review existing user permissions to ensure the principle of least privilege is enforced until the patch is applied.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent exploitability is high due to the low complexity required for an authenticated attacker to bypass authorization checks.

Analyst Recommendation

This vulnerability presents a high risk to organizational security due to the potential for unauthorized data manipulation. Security teams should prioritize updating the feishu package to version 2026.6.9 immediately to remediate the authorization bypass and prevent potential exploitation.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Feishu
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The OpenClaw Feishu npm package contains an authorization bypass vulnerability, allowing authenticated users to perform unauthorized operations.

Executive Summary:
An authorization bypass vulnerability in the OpenClaw Feishu npm package allows authenticated users to exceed their intended permissions, posing a significant security risk.

Vulnerability Details

CVE-ID: CVE-2026-62187

Affected Software: OpenClaw Feishu

Affected Versions: 0 up to (excluding) 2026.6.9

Vulnerability: This is an incorrect authorization vulnerability (CWE-863). The vulnerability requires the attacker to have low-level privileges (PR:L) to exploit, allowing them to perform unauthorized actions at a higher privilege level.

Business Impact

The ability for a low-privileged user to bypass authorization controls can lead to unauthorized data modification, privilege escalation, or access to restricted administrative functions. With a CVSS score of 8.1, the potential for internal system compromise is high, necessitating immediate remediation.

Remediation Plan

Immediate Action: Update the @openclaw/feishu npm package to version 2026.6.9 or later immediately.

Proactive Monitoring: Review application logs for unusual activity performed by low-privileged user accounts that typically should not have access to specific Feishu tools or functions.

Compensating Controls: Audit and restrict user permissions within the application environment to ensure that the principle of least privilege is enforced until the update is deployed.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw stems from a failure to properly verify authorization levels during function execution.

Analyst Recommendation

All users of the @openclaw/feishu package must update to version 2026.6.9 immediately. Failure to patch this vulnerability leaves the application susceptible to privilege escalation and unauthorized administrative actions by existing users.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.6.8
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is susceptible to authorization bypass vulnerabilities due to missing or incorrect checks, allowing authenticated users to perform unauthorized actions.

Executive Summary:
A missing authorization vulnerability in OpenClaw allows authenticated users to bypass security controls, posing a significant risk of unauthorized data access.

Vulnerability Details

CVE-ID: CVE-2026-62186

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.6.8

Vulnerability: This flaw involves CWE-862 (Missing Authorization) and CWE-863 (Incorrect Authorization). An attacker with low privileges (PR:L) can leverage this via a network-based attack vector to override HTTP models and potentially access sensitive data.

Business Impact

The vulnerability carries a CVSS score of 7.6, indicating a high severity risk. Successful exploitation may result in unauthorized access to sensitive information or unauthorized modification of system settings, potentially leading to a breach of data confidentiality.

Remediation Plan

Immediate Action: Upgrade OpenClaw to version 2026.6.8 or later to resolve the authorization logic flaws.

Proactive Monitoring: Review application access logs for unusual patterns, specifically focusing on requests that involve HTTP model overrides or unexpected administrative actions by low-privileged accounts.

Compensating Controls: Implement strict network segmentation and ensure that the application is not exposed to untrusted networks; consider applying WAF rules to detect and block suspicious HTTP request structures.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's exploitability is moderate, requiring the attacker to have an existing low-privileged account on the system.

Analyst Recommendation

Given the high CVSS score and the nature of authorization bypass flaws, immediate remediation is required. Security teams should prioritize updating all instances of OpenClaw to version 2026.6.8 to effectively close the authorization gap and prevent unauthorized access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: OpenClaw before 2026.5.26
---END_METADATA---

Description Summary:
An authorization bypass vulnerability exists in OpenClaw that allows paired devices to regain unauthorized WebSocket node-level access after token revocation.

Executive Summary:
An authorization bypass vulnerability in OpenClaw allows attackers with a paired device to regain unauthorized node-level access, posing a high risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-53843

Affected Software: OpenClaw

Affected Versions: OpenClaw before 2026.5.26

Vulnerability: This vulnerability involves a flaw in pairing-scoped session management where a device can re-establish node token authority following revocation. The attack requires an attacker to possess a previously paired device, effectively bypassing the requirement for renewed administrative approval.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting its high severity. Successful exploitation permits an attacker to maintain persistent, unauthorized WebSocket access to critical nodes, potentially leading to unauthorized data access, command execution, or the subversion of secure communications within the environment.

Remediation Plan

Immediate Action: Upgrade all OpenClaw installations to version 2026.5.26 or later to enforce proper token revocation logic.

Proactive Monitoring: Monitor WebSocket traffic patterns for unusual connection persistence or unauthorized node-level interactions that deviate from established baselines.

Compensating Controls: Implement strict network-level access controls to restrict which devices can establish WebSocket connections to the node controller.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, this vulnerability represents a significant threat to internal service integrity. Organizations should prioritize patching to version 2026.5.26 immediately to remediate the authorization flaw and prevent unauthorized node access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: Versions prior to 2026.5.27
---END_METADATA---

Description Summary:
OpenClaw contains a state mutation vulnerability in node pairing that allows attackers to bypass approval restrictions and elevate node authority.

Executive Summary:
A critical state mutation vulnerability in OpenClaw allows for unauthorized elevation of node authority, posing a significant risk to system integrity and access control.

Vulnerability Details

CVE-ID: CVE-2026-53838

Affected Software: OpenClaw Multiple Products

Affected Versions: Versions prior to 2026.5.27

Vulnerability: This vulnerability occurs during the node pairing reconnection process. By manipulating the reconnection logic, an attacker can trick the system into presenting or restoring broader node authority than intended, effectively bypassing established approval scopes.

Business Impact

With a CVSS score of 9.8, this vulnerability represents a severe threat to the integrity of the environment. An attacker could gain unauthorized administrative or operational capabilities within the node network, potentially leading to unauthorized data access or disruption of critical business services.

Remediation Plan

Immediate Action: Update all OpenClaw installations to version 2026.5.27 or later to resolve the state mutation flaw.

Proactive Monitoring: Review node pairing logs for anomalous reconnection attempts or unexpected changes in node permission levels.

Compensating Controls: Implement strict network-level segmentation to limit the impact of compromised nodes and restrict access to the pairing interface to known, trusted management segments.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jun 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability to bypass authorization controls is a high-risk scenario. Organizations should prioritize updating to the patched version immediately and perform a security audit of current node permissions to ensure no unauthorized escalation has already occurred.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.12
---END_METADATA---

Description Summary:
OpenClaw is vulnerable to an allowlist bypass in PowerShell command parsing, allowing remote authenticated operators to execute arbitrary commands using abbreviated flag aliases.

Executive Summary:
A critical allowlist bypass in OpenClaw enables remote authenticated operators to execute arbitrary PowerShell commands, circumventing existing security restrictions.

Vulnerability Details

CVE-ID: CVE-2026-53836

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.12

Vulnerability: This is an allowlist bypass vulnerability in the handling of PowerShell encoded-commands. Attackers can leverage unrecognized flag aliases to bypass the parser's security checks and execute arbitrary PowerShell content.

Business Impact

The ability to execute arbitrary PowerShell commands provides an attacker with a powerful vehicle for system-wide compromise. With a CVSS score of 8.8, this flaw could lead to data theft, lateral movement, or complete system takeover, causing severe damage to business operations.

Remediation Plan

Immediate Action: Patch OpenClaw to version 2026.5.12 or higher to correct the PowerShell command parsing logic.

Proactive Monitoring: Monitor for suspicious PowerShell execution patterns or the use of unusual encoded command syntax in logs.

Compensating Controls: Utilize endpoint detection and response (EDR) solutions to flag or block unauthorized PowerShell scripts and encoded commands.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given that this vulnerability allows for the execution of arbitrary commands, it presents a significant risk to the integrity of the host system. Immediate patching to version 2026.5.12 is required to mitigate this bypass and prevent unauthorized command execution.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
A high-severity vulnerability exists in OpenClaw, details of which are currently limited.

Executive Summary:
An unspecified high-severity vulnerability in OpenClaw requires immediate investigation and patching to prevent potential security compromises.

Vulnerability Details

CVE-ID: CVE-2026-53831

Affected Software: OpenClaw

Affected Versions: See vendor advisory

Vulnerability: The nature of this vulnerability is currently under review, but it is classified as a high-severity flaw. Users of OpenClaw should consult official vendor documentation for specific technical details and patch availability.

Business Impact

With a CVSS score of 8.3, this vulnerability represents a significant risk to any infrastructure utilizing the OpenClaw software. The potential impact likely includes unauthorized access or service disruption, requiring urgent attention from security teams.

Remediation Plan

Immediate Action: Check the official OpenClaw vendor portal for the latest security updates and apply them immediately to all affected deployments.

Proactive Monitoring: Monitor system logs for unusual behavior, unauthorized access attempts, or performance degradation that may indicate exploitation.

Compensating Controls: Isolate affected systems from external networks until patches are applied to reduce the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, administrators must remain vigilant and apply updates as soon as they are made available by the vendor. Proactive isolation of affected assets is strongly advised until the vulnerability can be fully analyzed and remediated.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: OpenClaw before 2026.5.18
---END_METADATA---

Description Summary:
OpenClaw contains an approval display truncation vulnerability that allows authenticated users to hide command suffixes from approvers, enabling unauthorized command execution.

Executive Summary:
An authentication-based approval display truncation vulnerability in OpenClaw allows attackers to execute unauthorized commands, posing a significant risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-53829

Affected Software: OpenClaw

Affected Versions: OpenClaw before 2026.5.18

Vulnerability: This vulnerability is an approval display truncation flaw occurring within the command execution workflow. An authenticated attacker can submit oversized exec commands containing benign prefixes followed by malicious suffixes, which are hidden from the user approving the action.

Business Impact

Successful exploitation of this vulnerability allows for the execution of unauthorized operations under the guise of an approved action, potentially leading to privilege escalation or complete system compromise. With a CVSS score of 8.0, this high-severity flaw represents a significant risk to operational integrity and data security.

Remediation Plan

Immediate Action: Upgrade OpenClaw to version 2026.5.18 or later to resolve the truncation issue.

Proactive Monitoring: Review audit logs for unusual command submissions or unexpected changes in system configuration following approval events.

Compensating Controls: Implement strict input validation policies and limit the number of users with approval permissions to reduce the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 14, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, organizations should prioritize patching their OpenClaw instances. The ability for an authenticated user to bypass approval controls necessitates immediate attention to prevent unauthorized system modifications.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.6
---END_METADATA---

Description Summary:
An authorization bypass in OpenClaw allows authenticated users to execute restricted, owner-only native commands by circumventing policy enforcement.

Executive Summary:
OpenClaw is susceptible to an authorization bypass that enables authenticated users to execute privileged commands reserved for owners.

Vulnerability Details

CVE-ID: CVE-2026-53828

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.6

Vulnerability: This is an authorization bypass vulnerability within the native command handling component. It permits authenticated senders to successfully trigger commands that should be restricted to the owner, effectively ignoring established access control policies.

Business Impact

Exploitation of this flaw grants unauthorized users elevated privileges, allowing them to perform administrative actions they are not authorized to access. The CVSS score of 8.8 reflects the high risk of unauthorized management and potential system misuse, which could compromise the security posture of the entire environment.

Remediation Plan

Immediate Action: Update all affected OpenClaw deployments to version 2026.5.6 or later to restore proper command authorization checks.

Proactive Monitoring: Review access logs for unauthorized attempts to execute owner-specific commands by non-owner accounts.

Compensating Controls: Limit the number of users with authenticated access to the command interface to reduce the number of potential attackers.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability undermines the principle of least privilege. Organizations should update to version 2026.5.6 immediately to enforce correct command authorization and prevent unauthorized escalation of privileges.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.18
---END_METADATA---

Description Summary:
A command injection vulnerability in OpenClaw allows attackers to manipulate command arguments post-approval, enabling the execution of unauthorized shell commands.

Executive Summary:
OpenClaw contains a critical command injection flaw that allows attackers to bypass security allowlists by rebuilding command arguments after initial validation.

Vulnerability Details

CVE-ID: CVE-2026-53822

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.18

Vulnerability: This is a command injection vulnerability where the shell wrapper argv can be modified between the approval phase and the final execution. This time-of-check to time-of-use (TOCTOU) discrepancy allows attackers to execute unapproved command shapes.

Business Impact

The ability to inject and execute arbitrary commands carries a high risk of full system compromise. With a CVSS score of 8.8, this vulnerability allows attackers to bypass intended security controls, potentially leading to unauthorized data exfiltration, malware installation, or persistent system access.

Remediation Plan

Immediate Action: Apply the vendor-provided security update to version 2026.5.18 to remediate the command argument validation logic.

Proactive Monitoring: Audit system logs for unexpected shell commands or anomalous command-line arguments being executed by the OpenClaw process.

Compensating Controls: Implement strict OS-level execution policies or sandboxing to limit the impact of potential command injection attempts.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential for arbitrary code execution, this vulnerability should be treated with high urgency. Administrators must prioritize patching to version 2026.5.18 to ensure command execution integrity and prevent bypass of established security policies.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.18
---END_METADATA---

Description Summary:
A vulnerability in OpenClaw allows unauthorized users to obtain cached operator.admin authority on WebSocket connections to execute admin-gated Gateway RPCs.

Executive Summary:
OpenClaw is vulnerable to an authentication bypass that permits unauthorized users to gain administrative privileges and execute sensitive Gateway RPCs.

Vulnerability Details

CVE-ID: CVE-2026-53821

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.18

Vulnerability: This is an authentication and authorization flaw where unpaired or restricted trusted-proxy Control UI clients can acquire cached operator.admin authority. By exploiting this on live WebSocket connections, attackers can execute administrative-level Gateway Remote Procedure Calls (RPCs).

Business Impact

Successful exploitation of this vulnerability grants an attacker full administrative control over the Gateway interface. Given the high CVSS score of 8.8, this poses a severe risk of unauthorized data access, system configuration changes, and potential compromise of the entire application infrastructure, leading to significant operational disruption.

Remediation Plan

Immediate Action: Upgrade all instances of OpenClaw to version 2026.5.18 or later to resolve the authorization cache issue.

Proactive Monitoring: Monitor WebSocket traffic for unusual RPC calls or unexpected administrative actions originating from unauthorized or restricted client profiles.

Compensating Controls: Restrict network access to the Control UI and Gateway interfaces to known, trusted IP ranges to minimize the attack surface until patching is complete.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate attention. Organizations should prioritize updating to version 2026.5.18 to close the privilege escalation vector and prevent unauthorized administrative access to critical system components.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.27
---END_METADATA---

Description Summary:
An arbitrary code execution vulnerability exists in OpenClaw skill install flows where workspace .env files can override the Homebrew executable selection.

Executive Summary:
An arbitrary code execution flaw in OpenClaw allows attackers with workspace access to compromise the system by overriding executable paths during skill installation.

Vulnerability Details

CVE-ID: CVE-2026-53819

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.27

Vulnerability: This vulnerability affects the skill installation flow. An attacker with access to a trusted operator workspace can modify the environment (.env) files to override the selection of the Homebrew executable, forcing the system to execute arbitrary binaries instead of the intended ones.

Business Impact

The CVSS score of 8.8 underscores the severity of this arbitrary code execution risk. If successfully exploited, an attacker could gain control over the system, potentially executing malicious payloads with the privileges of the service performing the skill installation.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.27 or later to prevent unauthorized executable overrides.

Proactive Monitoring: Audit the contents of workspace configuration files and monitor skill installation logs for any anomalies in executable path selection.

Compensating Controls: Restrict write access to workspace .env files to authorized personnel only and implement file integrity monitoring (FIM) on configuration directories.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Because this vulnerability allows for the execution of arbitrary code, it represents a high risk to system integrity. Administrators should apply the update to version 2026.5.27 immediately to ensure that executable paths are validated and cannot be hijacked by malicious configuration files.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.22
---END_METADATA---

Description Summary:
A locality validation vulnerability in the OpenClaw Control UI pairing allows network-adjacent attackers to obtain durable admin-capable device tokens.

Executive Summary:
An insufficient locality validation flaw in OpenClaw allows attackers to spoof administrative access tokens, leading to persistent unauthorized control.

Vulnerability Details

CVE-ID: CVE-2026-53817

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.22

Vulnerability: The vulnerability resides in the Control UI pairing process, where locality validation is insufficient. An attacker with network access can spoof locality information to trick the system into granting durable, administrative-level device tokens that persist beyond standard rotation periods.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a high risk of long-term unauthorized administrative access. If exploited, an attacker could maintain persistent control over the affected infrastructure, leading to significant risk of data exfiltration and operational disruption.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.22 or later to strengthen pairing security and token validation.

Proactive Monitoring: Monitor for newly generated administrative tokens and investigate any anomalous device pairing events in the logs.

Compensating Controls: Use network segmentation to restrict access to the Control UI to trusted, authorized subnets, reducing the exposure to network-adjacent attackers.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability for an attacker to gain persistent, administrative-level credentials is a critical security concern. Organizations must prioritize the update to version 2026.5.22 to ensure that token issuance is properly secured against locality-based spoofing.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
OpenClaw versions prior to 2026 contain a critical security vulnerability requiring immediate remediation.

Executive Summary:
A critical security vulnerability in OpenClaw before 2026 poses a significant risk to organizational infrastructure and data integrity.

Vulnerability Details

CVE-ID: CVE-2026-53814

Affected Software: OpenClaw

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The software contains an unspecified vulnerability that may allow for unauthorized system interaction. Given the lack of granular technical documentation, the authentication requirements are currently indeterminate, necessitating a conservative security posture.

Business Impact

The identified vulnerability carries a CVSS score of 8.3, classifying it as High severity. Successful exploitation could lead to unauthorized access, potential data exfiltration, or service disruption, directly impacting business continuity and sensitive data protection efforts.

Remediation Plan

Immediate Action: Update all instances of OpenClaw to version 2026 or later as soon as the vendor makes the patch available.

Proactive Monitoring: Review system and application access logs for unusual patterns, unauthorized authentication attempts, or unexpected process execution.

Compensating Controls: Implement strict network segmentation and egress filtering to limit the potential blast radius of a successful compromise while awaiting an official patch.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the High severity rating of this vulnerability, immediate attention is required. Administrators should prioritize identifying all instances of OpenClaw within their environment and apply the necessary updates as soon as they become available to mitigate the risk of unauthorized access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.7
---END_METADATA---

Description Summary:
OpenClaw contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable display name metadata.

Executive Summary:
A privilege escalation flaw in OpenClaw allows authenticated attackers to spoof identities and gain unauthorized access via mutable display name metadata.

Vulnerability Details

CVE-ID: CVE-2026-53811

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.7

Vulnerability: This vulnerability affects the "Matrix allowFrom" feature, which fails to securely validate identity against mutable display name metadata. Authenticated users can modify their display names to match policy entries, effectively escalating their privileges to that of another identity.

Business Impact

The CVSS score of 8.8 highlights the severity of this privilege escalation, which could result in unauthorized access to sensitive data or administrative functions. This flaw undermines the trust model of the Matrix feature, potentially allowing lower-privileged users to assume the roles of administrators.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.7 or later to fix the identity validation logic.

Proactive Monitoring: Review user account changes and display name modifications for suspicious patterns that may indicate an attempt to impersonate authorized identities.

Compensating Controls: Disable or restrict the use of the "Matrix allowFrom" feature until the patch is applied if the organization is unable to update immediately.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Privilege escalation vulnerabilities are critical as they allow for lateral movement within an application. It is imperative that administrators update to version 2026.5.7 or later to ensure that identity matching is enforced correctly and securely.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.18
---END_METADATA---

Description Summary:
A code execution vulnerability in OpenClaw allows marketplace runtime extension metadata to redirect loading toward unscanned package payloads.

Executive Summary:
A code execution flaw in OpenClaw allows attackers with trusted operator access to bypass security scans by redirecting extension metadata to malicious payloads.

Vulnerability Details

CVE-ID: CVE-2026-53810

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.18

Vulnerability: The vulnerability exists within the marketplace runtime, where metadata handling fails to properly validate extension sources. An attacker with trusted operator access can manipulate this metadata to force the loading of unverified or malicious plugin code.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a significant risk to the integrity of the software supply chain within the platform. Unauthorized code execution could lead to full system compromise, data theft, and the persistence of malicious extensions within the environment.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.18 or later to remediate the metadata validation flaw.

Proactive Monitoring: Audit marketplace extension installations and review logs for any unexpected redirection or loading of non-standard package paths.

Compensating Controls: Restrict "trusted operator" access to the minimum number of users and implement rigorous code review processes for any custom extensions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability for an attacker to bypass security scans and execute arbitrary code represents a critical failure in the plugin architecture. Administrators must apply the version 2026.5.18 update immediately to restore the integrity of the extension loading process.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability in OpenClaw's interactive callback functionality poses a significant security risk to users.

Executive Summary:
OpenClaw versions prior to 2026 are susceptible to a high-severity flaw involving interactive callbacks, increasing the risk of unauthorized system manipulation.

Vulnerability Details

CVE-ID: CVE-2026-53807

Affected Software: OpenClaw

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability resides in the way OpenClaw handles interactive callbacks. Improper validation within these functions could allow an attacker to influence application behavior in unintended ways.

Business Impact

With a CVSS score of 8.8, this is a High-severity issue. Exploitation could allow attackers to bypass security controls or perform unauthorized actions, potentially leading to data manipulation and loss of system integrity.

Remediation Plan

Immediate Action: Update all OpenClaw components to the most recent version available from the vendor.

Proactive Monitoring: Monitor system logs for unusual callback-related errors or unexpected application behavior that might indicate an exploitation attempt.

Compensating Controls: Restrict interactive access to the application to authorized users only and ensure that all input processed by the system is validated at the application layer.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential for this vulnerability to be used for unauthorized system manipulation, immediate patching is essential. Security administrators should prioritize testing and deploying the update to all affected production systems to mitigate the high risk posed by this flaw.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Multiple Products
AFFECTED_VERSIONS: OpenClaw before 2026.5.12
---END_METADATA---

Description Summary:
OpenClaw contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks.

Executive Summary:
A shell option parsing vulnerability in OpenClaw allows attackers to execute unauthorized commands by bypassing security validation checks.

Vulnerability Details

CVE-ID: CVE-2026-53806

Affected Software: OpenClaw Multiple Products

Affected Versions: OpenClaw before 2026.5.12

Vulnerability: This vulnerability involves a flaw in shell option parsing that permits the use of combined POSIX shell flags. By leveraging these flags, an attacker can bypass exec revalidation, enabling the execution of arbitrary inline shell content.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting a high risk of unauthorized command execution. Successful exploitation could allow an attacker to gain system-level control, leading to potential data breaches, unauthorized modifications, and complete compromise of the affected host environment.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.5.12 or later to apply the necessary security patches.

Proactive Monitoring: Monitor system logs for suspicious shell activity or unexpected processes initiated by the OpenClaw service.

Compensating Controls: Ensure strict adherence to the principle of least privilege for service accounts and employ command-line auditing to detect unauthorized flag usage.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score and the potential for arbitrary code execution, organizations should prioritize patching affected OpenClaw instances immediately. Failure to update to version 2026.5.12 or later leaves systems exposed to potential unauthorized command execution.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.4.23
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in OpenClaw allows for unsafe configuration mutation via a gateway tool denylist bypass, enabling unauthorized system changes.

Executive Summary:
An unsafe configuration mutation flaw in OpenClaw allows authenticated attackers to bypass security filters and compromise system settings.

Vulnerability Details

CVE-ID: CVE-2026-45006

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.4.23

Vulnerability: This is an Incomplete List of Disallowed Inputs (CWE-184) vulnerability. It allows an authenticated user to bypass input validation filters, leading to unauthorized configuration mutations via the gateway tool.

Business Impact

By bypassing denylist filters, an attacker can modify system configurations that should be restricted, leading to significant security degradation. A CVSS score of 8.8 indicates a high-severity risk, where successful exploitation could lead to full loss of control over the application's operational parameters.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.4.23 to resolve the input validation bypass.

Proactive Monitoring: Audit system configuration changes and logs for any modifications made via the gateway tool that deviate from established operational baselines.

Compensating Controls: Restrict access to the affected gateway tool to only authorized personnel and implement strict egress filtering to prevent unauthorized configuration pushes.

Exploitation Status

Public Exploit Available: No confirmed public exploit (Metasploit/ExploitDB).

Analyst Notes: As of May 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its impact on system configuration integrity.

Analyst Recommendation

This vulnerability represents a significant risk to system stability and security. It is recommended that all users of OpenClaw update their instances to the 2026.4.23 release immediately to ensure input validation mechanisms are correctly enforced.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.4.23
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is susceptible to arbitrary code execution due to an uncontrolled search path element.

Executive Summary:
An uncontrolled search path vulnerability in OpenClaw could allow an attacker to execute arbitrary code, potentially leading to a total system compromise.

Vulnerability Details

CVE-ID: CVE-2026-45004

Affected Software: OpenClaw

Affected Versions: 0 up to (excluding) 2026.4.23

Vulnerability: This vulnerability (CWE-427) involves an uncontrolled search path element where the application may load malicious files from the current working directory. The vulnerability requires user interaction to facilitate the loading of untrusted components.

Business Impact

The ability for an attacker to achieve arbitrary code execution represents a significant security risk, potentially leading to full system compromise, data exfiltration, or installation of persistent backdoors. With a CVSS score of 7.8, this vulnerability poses a high risk to business operations and data security.

Remediation Plan

Immediate Action: Update the OpenClaw npm package to version 2026.4.23 immediately.

Proactive Monitoring: Scan for anomalous processes or unexpected execution of scripts initiated by the OpenClaw service.

Compensating Controls: Restrict the permissions of the directory where the application is executed to prevent unauthorized modification of local files.

Exploitation Status

Public Exploit Available: No (no confirmed public exploit in available data).

Analyst Notes: As of May 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous as it allows for code execution if an attacker can place a malicious file in the working directory.

Analyst Recommendation

The severity of this arbitrary code execution flaw necessitates immediate patching. Organizations should ensure all instances of the OpenClaw package are updated to version 2026.4.23 to eliminate this critical attack vector.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.4.20
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is affected by a missing authorization vulnerability in the gateway configuration.

Executive Summary:
A missing authorization flaw in OpenClaw allows authenticated users to mutate gateway configurations, potentially disrupting service availability.

Vulnerability Details

CVE-ID: CVE-2026-45001

Affected Software: OpenClaw

Affected Versions: 0 up to (excluding) 2026.4.20

Vulnerability: This is a missing authorization vulnerability (CWE-862) occurring within the agent tool access mechanism. An authenticated user can bypass configuration guards to modify gateway settings without proper permission checks.

Business Impact

An attacker exploiting this vulnerability could unauthorizedly alter system configurations, which may result in service disruption or the exposure of sensitive gateway parameters. With a CVSS score of 7.1, this flaw presents a substantial risk to service availability and configuration integrity.

Remediation Plan

Immediate Action: Update the OpenClaw npm package to version 2026.4.20 to enforce proper authorization checks.

Proactive Monitoring: Review audit logs for unauthorized configuration changes or suspicious activity related to agent tool access.

Compensating Controls: Implement strict role-based access control (RBAC) to limit the number of users who can interact with sensitive gateway configuration tools.

Exploitation Status

Public Exploit Available: No (no confirmed public exploit in available data).

Analyst Notes: As of May 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw relies on the attacker having valid user credentials to interact with the gateway tools.

Analyst Recommendation

To maintain the security and stability of your infrastructure, please apply the update to version 2026.4.20 as soon as possible. Restricting access to sensitive configuration tools remains a critical layer of defense against this vulnerability.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.4.20
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
OpenClaw is vulnerable to arbitrary code execution via insecure handling of environment variables, allowing attackers to leverage functionality from an untrusted control sphere.

Executive Summary:
A vulnerability in OpenClaw allows for arbitrary code execution, posing a high risk of total system compromise to affected environments.

Vulnerability Details

CVE-ID: CVE-2026-44995

Affected Software: OpenClaw OpenClaw

Affected Versions: 0 up to (excluding) 2026.4.20

Vulnerability: This vulnerability (CWE-829) arises from the inclusion of functionality from an untrusted control sphere. An authenticated local attacker with low privileges can leverage this flaw to achieve arbitrary code execution.

Business Impact

The CVSS score of 7.3 reflects a high severity due to the potential for total impact on confidentiality, integrity, and availability of the affected system. Successful exploitation could allow an attacker to execute arbitrary commands, potentially leading to a complete takeover of the host or unauthorized access to sensitive application data.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.4.20 or later.

Proactive Monitoring: Audit environment variables and system logs for unexpected process execution or modifications to application configuration files.

Compensating Controls: Implement strict file system permissions and restrict user access to the environment where OpenClaw is running to mitigate the risk of local exploitation.

Exploitation Status

Public Exploit Available: No (Exploit available: unknown)

Analyst Notes: As of May 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires local access, the impact is severe, necessitating prompt patching.

Analyst Recommendation

Given the potential for arbitrary code execution, organizations should prioritize upgrading to version 2026.4.20 immediately. Although local access is required, the severity of the potential impact warrants an expedited patch cycle to prevent unauthorized system control.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Sandbox Browser
AFFECTED_VERSIONS: Before 2026.4.15
---END_METADATA---

Description Summary:
OpenClaw contains an authentication bypass in webhook validation that allows unauthenticated attackers to execute arbitrary commands.

Executive Summary:
A critical authentication bypass in OpenClaw's webhook validation allows unauthenticated attackers to execute arbitrary commands on the system.

Vulnerability Details

CVE-ID: CVE-2026-44109

Affected Software: OpenClaw Sandbox Browser

Affected Versions: Before 2026.4.15

Vulnerability: The application fails to validate webhook signatures when configuration keys are missing, effectively failing open. This allows an unauthenticated attacker to replay requests or bypass signature verification entirely to execute arbitrary commands.

Business Impact

The ability to execute arbitrary commands on the host system represents the highest level of security risk. Given the 9.8 CVSS score, this vulnerability could be leveraged to gain full system control, install malware, or exfiltrate sensitive data.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.4.15 or later immediately.

Proactive Monitoring: Review system logs for unauthorized command execution and audit webhook callback patterns.

Compensating Controls: Ensure that all webhook endpoints are protected by robust authentication and signature verification, and use network segmentation to limit the exposure of these endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical vulnerability that must be addressed immediately. Ensure all instances are patched and that cryptographic keys are properly configured to prevent unauthorized command execution.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Sandbox Browser
AFFECTED_VERSIONS: 2026.3.31 before 2026.4.10
---END_METADATA---

Description Summary:
OpenClaw contains a privilege escalation vulnerability where heartbeat owner downgrade detection misses async execution completion events.

Executive Summary:
A privilege escalation vulnerability in OpenClaw allows attackers to execute code in a more privileged context than originally intended.

Vulnerability Details

CVE-ID: CVE-2026-43578

Affected Software: OpenClaw Sandbox Browser

Affected Versions: 2026.3.31 before 2026.4.10

Vulnerability: The application fails to correctly track privilege levels during asynchronous execution completion events. An attacker can provide malicious content to trigger this logic error, resulting in elevated privileges.

Business Impact

Successful exploitation allows an attacker to break out of lower-privileged contexts to gain higher system or application-level access. With a 9.1 CVSS score, this flaw presents a significant risk for lateral movement and total system compromise.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.4.10 or later.

Proactive Monitoring: Monitor for anomalous process execution or unexpected privilege changes within the application's runtime.

Compensating Controls: Apply the principle of least privilege to all service accounts and utilize container or OS-level sandboxing to restrict the impact of potential privilege escalation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should prioritize upgrading their OpenClaw instances to address this privilege escalation flaw, ensuring that internal security boundaries remain intact.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Sandbox Browser
AFFECTED_VERSIONS: 2026.2.21 before 2026.4.10
---END_METADATA---

Description Summary:
OpenClaw contains an authentication bypass in the noVNC helper route, allowing unauthenticated attackers to hijack interactive browser sessions.

Executive Summary:
An authentication bypass in OpenClaw allows unauthenticated attackers to gain unauthorized control over interactive browser sessions via the noVNC helper.

Vulnerability Details

CVE-ID: CVE-2026-43575

Affected Software: OpenClaw Sandbox Browser

Affected Versions: 2026.2.21 before 2026.4.10

Vulnerability: The noVNC helper route fails to enforce bridge authentication. An attacker can access this route directly to view or control an active browser session.

Business Impact

This vulnerability allows for the total compromise of an active browser session, potentially leading to the theft of session tokens, sensitive data, or the execution of malicious actions on behalf of the user. With a 9.8 CVSS score, the risk of unauthorized access is critical.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.4.10 or later immediately.

Proactive Monitoring: Monitor access logs for the noVNC helper route and investigate any requests that do not originate from authorized bridge connections.

Compensating Controls: Implement strict firewall rules to restrict access to the noVNC helper route to trusted network segments only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Securing the noVNC helper route is critical for preventing session hijacking. Organizations should apply the update promptly and verify that authentication mechanisms are functioning as expected.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.4.7 through 2026.4.13
---END_METADATA---

Description Summary:
OpenClaw contains a privilege escalation vulnerability where heartbeat owner downgrade logic incorrectly skips webhook wake events, allowing attackers to maintain elevated privileges.

Executive Summary:
A critical privilege escalation vulnerability in OpenClaw allows attackers to maintain unauthorized elevated privileges by manipulating webhook wake events.

Vulnerability Details

CVE-ID: CVE-2026-43566

Affected Software: OpenClaw

Affected Versions: 2026.4.7 through 2026.4.13

Vulnerability: The flaw exists in the heartbeat owner downgrade logic, which fails to correctly process webhook wake events containing untrusted content, allowing an attacker to bypass the downgrade process and retain higher-privileged execution contexts.

Business Impact

With a CVSS score of 9.1, this vulnerability allows for unauthorized privilege escalation. An attacker could maintain long-term administrative or system-level access, leading to persistent compromise of the OpenClaw environment and potential data theft.

Remediation Plan

Immediate Action: Update to the latest version of OpenClaw (2026.4.14 or later) as specified in the vendor security advisory.

Proactive Monitoring: Review system audit logs for anomalous privilege changes or unauthorized webhook event processing.

Compensating Controls: Implement strict ingress filtering for webhooks and ensure that only trusted sources can trigger wake events within the OpenClaw platform.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations using OpenClaw should consult the official vendor security advisory and apply the recommended patches immediately to address the privilege escalation flaw.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Prior to 2026.4.10
---END_METADATA---

Description Summary:
OpenClaw contains an input validation vulnerability allowing external hook metadata to be enqueued as trusted system events, leading to privilege escalation.

Executive Summary:
A critical input validation vulnerability in OpenClaw allows attackers to escalate untrusted input into a higher-trust agent context, potentially leading to unauthorized system actions.

Vulnerability Details

CVE-ID: CVE-2026-43534

Affected Software: OpenClaw

Affected Versions: Prior to 2026.4.10

Vulnerability: This is an input validation vulnerability where the application fails to properly verify the source of hook metadata. Attackers can supply malicious hook names that are then treated as trusted system events, allowing for context escalation.

Business Impact

The CVSS score of 9.1 reflects the critical nature of this privilege escalation issue. Exploitation allows an attacker to operate within a higher-trust context, facilitating unauthorized actions that could lead to system-wide compromise or data exfiltration.

Remediation Plan

Immediate Action: Apply the vendor-provided patch by updating OpenClaw to version 2026.4.10 or higher.

Proactive Monitoring: Monitor for suspicious metadata entries in system event queues or unusual hook registration activity.

Compensating Controls: Enforce strict input validation and metadata verification at the application layer to ensure only authenticated, trusted events are processed.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate patching is required to mitigate this privilege escalation risk. Ensure that all system updates are tested and deployed in accordance with the vendor's security guidance.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Before 2026.3.22
---END_METADATA---

Description Summary:
A privilege escalation vulnerability in OpenClaw during device pairing allows attackers to gain unauthorized access by manipulating device roles.

Executive Summary:
OpenClaw contains a critical privilege escalation flaw that allows unauthorized users to manipulate device roles during the pairing process.

Vulnerability Details

CVE-ID: CVE-2026-41386

Affected Software: OpenClaw

Affected Versions: Before 2026.3.22

Vulnerability: Bootstrap setup codes are not properly bound to specific device roles or scopes, allowing an unauthenticated attacker to escalate privileges during initial pairing.

Business Impact

The CVSS score of 9.1 underscores the critical nature of this flaw, which allows an attacker to bypass intended access controls. This could lead to unauthorized administrative control over devices, potentially exposing sensitive operational data or allowing for broader network compromise.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.22 or later immediately to enforce proper scope and role binding during pairing.

Proactive Monitoring: Review system logs for pairing events and privilege changes that occur during the onboarding of new devices.

Compensating Controls: Implement strict physical and network access controls during the device pairing window to minimize the exposure to unauthorized individuals.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Apr 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Updating to the latest version is mandatory to correct the logic error in the pairing process. Administrators should ensure that all new device onboarding follows the updated, secure pairing procedures defined in the latest documentation.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Before 2026.3.31
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
A sandbox bypass vulnerability in OpenClaw before 2026.3.31 allows attackers to escalate privileges by manipulating heartbeat context inheritance and the senderIsOwner parameter.

Executive Summary:
A critical sandbox bypass vulnerability in OpenClaw allows attackers to escalate privileges, potentially leading to full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-41329

Affected Software: OpenClaw

Affected Versions: Before 2026.3.31

Vulnerability: This vulnerability involves improper context validation within the OpenClaw sandbox. By manipulating the heartbeat context inheritance and the senderIsOwner parameter, an attacker can bypass sandbox restrictions to achieve unauthorized privilege escalation.

Business Impact

The severity of this vulnerability is underscored by its 9.9 CVSS score, indicating a nearly maximal risk to system security. Successful exploitation grants an attacker elevated privileges, which could result in complete host compromise, data theft, and the disruption of critical business services.

Remediation Plan

Immediate Action: Upgrade all instances of OpenClaw to version 2026.3.31 or later immediately.

Proactive Monitoring: Review system logs for unusual heartbeat signals or repeated attempts to manipulate context parameters that may indicate exploitation efforts.

Compensating Controls: Ensure the application is running within a containerized environment with hardened kernel-level protections to limit the impact of a sandbox breakout.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this privilege escalation vulnerability, immediate patching is required. Administrators should verify that all deployments are updated to version 2026.3.31 to effectively close the sandbox bypass vector.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Canvas
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An authentication bypass vulnerability in OpenClaw Canvas allows unauthorized access to the application.

Executive Summary:
An authentication bypass vulnerability in OpenClaw Canvas poses a severe risk, potentially allowing unauthorized access to sensitive application functionality.

Vulnerability Details

CVE-ID: CVE-2026-3690

Affected Software: OpenClaw Canvas

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is an authentication bypass vulnerability that allows an attacker to circumvent existing security checks, potentially accessing restricted areas of the application without valid credentials.

Business Impact

Successful exploitation could result in unauthorized access to sensitive data and administrative functions within the Canvas application. With a CVSS score of 7.4, the vulnerability represents a high-risk entry point for attackers to compromise user accounts or perform unauthorized actions, leading to potential data breaches and service disruption.

Remediation Plan

Immediate Action: Apply the vendor-supplied security update immediately to patch the authentication bypass mechanism.

Proactive Monitoring: Analyze application access logs for suspicious patterns, such as successful access to protected areas without corresponding authentication events.

Compensating Controls: Implement Web Application Firewall (WAF) rules to detect and block requests that attempt to bypass authentication headers or parameters.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate action is necessary to close this authentication loophole. Security teams should prioritize patching the OpenClaw Canvas application to prevent unauthorized access and protect the confidentiality and integrity of the data managed within the platform.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 0 up to (excluding) 2026.5.18
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An incorrect authorization vulnerability in OpenClaw allows authenticated users to bypass scope restrictions via the inherited chat send route.

Executive Summary:
A critical authorization bypass vulnerability in OpenClaw allows authenticated attackers to perform unauthorized actions, necessitating an immediate update.

Vulnerability Details

CVE-ID: CVE-2026-35674

Affected Software: OpenClaw

Affected Versions: 0 up to (excluding) 2026.5.18

Vulnerability: This vulnerability (CWE-863) stems from an incorrect authorization check within the chat send route, permitting authenticated users to access functions outside their designated scope.

Business Impact

The exploit allows for unauthorized command execution or data manipulation within the application context, potentially leading to full compromise of the affected service. With a CVSS score of 8.8, this flaw represents a significant risk to data integrity and system security, as it bypasses intended access control mechanisms.

Remediation Plan

Immediate Action: Update the OpenClaw package to version 2026.5.18 or later via your package manager (e.g., npm).

Proactive Monitoring: Audit application logs for unusual chat activity or requests to administrative routes originating from standard user accounts.

Compensating Controls: Implement strict network-level access controls to limit the exposure of the application's internal API routes to trusted networks only.

Exploitation Status

Public Exploit Available: No (Exploit available: false)

Analyst Notes: As of May 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any authenticated user due to the missing permission validation in the chat route.

Analyst Recommendation

Given the high CVSS severity and the potential for unauthorized privilege escalation, administrators must prioritize upgrading to version 2026.5.18. Regular maintenance of the OpenClaw dependency tree is recommended to ensure such authorization flaws are mitigated promptly.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions prior to commit b57b680
---END_METADATA---

Description Summary:
OpenClaw contains an approval bypass vulnerability due to inconsistent environment variable normalization between approval and execution paths.

Executive Summary:
OpenClaw is susceptible to an approval bypass vulnerability that allows attackers to inject unauthorized environment variables into execution paths.

Vulnerability Details

CVE-ID: CVE-2026-34426

Affected Software: OpenClaw

Affected Versions: Versions prior to commit b57b680

Vulnerability: This flaw stems from inconsistent normalization of environment variables between the approval and execution stages. An authenticated attacker can exploit this discrepancy to inject malicious variables that bypass the system's validation and approval checks.

Business Impact

The ability to bypass approval systems poses a severe threat to the integrity of the execution environment. With a CVSS score of 7.6, this vulnerability could allow for unauthorized code execution or privilege escalation, leading to full system compromise. The breakdown of administrative controls can result in significant operational disruption and data breaches.

Remediation Plan

Immediate Action: Update OpenClaw to the version containing commit b57b680 or later to ensure consistent variable normalization.

Proactive Monitoring: Review execution logs for any environment variables that were not explicitly approved or that show signs of normalization bypass attempts.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter out suspicious characters in request parameters that might be used for variable injection.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, the logic flaw in the approval workflow makes this a highly attractive target for sophisticated attackers.

Analyst Recommendation

Applying the vendor-supplied fix is the only definitive way to resolve this logic flaw. Security administrators must ensure that the update is deployed across all production environments to maintain the integrity of the approval and execution pipeline.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions before 2026.3.13
---END_METADATA---

Description Summary:
OpenClaw's device pairing process is vulnerable to a replay attack where bootstrap setup codes can be reused to escalate pairing scopes to administrative levels.

Executive Summary:
OpenClaw versions before 2026.3.13 are vulnerable to a critical bootstrap code replay flaw that allows attackers to escalate privileges to administrative levels during device pairing.

Vulnerability Details

CVE-ID: CVE-2026-32987

Affected Software: OpenClaw

Affected Versions: Versions before 2026.3.13

Vulnerability: The flaw exists in src/infra/device-bootstrap.ts, where bootstrap setup codes can be replayed during the verification phase. An attacker can exploit this by submitting a valid code multiple times before final approval, effectively escalating pending pairing scopes to operator.admin status.

Business Impact

This vulnerability allows an attacker to bypass the intended security controls of the device pairing process, gaining unauthorized administrative access to the platform. With a CVSS score of 9.8, the risk is critical as it facilitates unauthorized control over the device management infrastructure and potential data exposure.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.13 or later to ensure bootstrap codes are invalidated immediately after their first use or during the verification process.

Proactive Monitoring: Monitor device pairing logs for multiple verification attempts using the same bootstrap code and investigate any unauthorized elevations to operator.admin status.

Compensating Controls: Implement time-limited bootstrap codes and require multi-factor authentication for administrative device pairing approvals.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 29, 2026, there is no public information indicating active exploitation. The replay nature of this vulnerability makes it a high-priority target for attackers looking to gain a foothold in OpenClaw environments.

Analyst Recommendation

Replay attacks against authentication and pairing mechanisms are high-impact vulnerabilities. Immediate patching to version 2026.3.13 is required to prevent unauthorized administrative access and maintain the integrity of the device bootstrap process.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions before 2026.3.12
---END_METADATA---

Description Summary:
A weak authorization vulnerability in OpenClaw's Zalouser allowlist mode allows attackers to bypass channel authorization by spoofing mutable group display names.

Executive Summary:
OpenClaw versions prior to 2026.3.12 contain a critical authorization vulnerability that allows attackers to route unauthorized messages to the agent by spoofing group names.

Vulnerability Details

CVE-ID: CVE-2026-32975

Affected Software: OpenClaw

Affected Versions: Versions before 2026.3.12

Vulnerability: In Zalouser allowlist mode, OpenClaw matches mutable group display names instead of stable, unique group identifiers. An attacker can create a new group with a name identical to an allowlisted group, thereby bypassing channel authorization and successfully routing messages to the agent.

Business Impact

This flaw allows unauthorized groups to interact with the OpenClaw agent, potentially leading to the disclosure of sensitive information or the execution of unauthorized tasks. The CVSS score of 9.8 emphasizes the critical risk associated with using non-unique, mutable attributes for security-critical authorization decisions.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.12 or later to ensure that the allowlist mechanism uses stable, unique group identifiers rather than mutable display names.

Proactive Monitoring: Review agent interaction logs for messages originating from unexpected or newly created groups that share names with trusted, allowlisted groups.

Compensating Controls: Disable Zalouser allowlist mode if it cannot be immediately patched, or implement manual verification for all new group-agent interactions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 29, 2026, there is no public information indicating active exploitation. The reliance on display names for security is a significant design weakness that is easily exploitable by motivated attackers.

Analyst Recommendation

Using mutable strings for authorization is a high-risk practice. Organizations must prioritize the update to version 2026.3.12 to transition to identifier-based authorization and prevent attackers from spoofing trusted groups to gain unauthorized agent access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions before 2026.3.12
---END_METADATA---

Description Summary:
An authorization bypass in OpenClaw's Feishu integration misclassifies group chat reaction events as private conversations, allowing attackers to circumvent group security protections.

Executive Summary:
OpenClaw versions prior to 2026.3.12 contain a critical authorization bypass vulnerability that allows attackers to circumvent group-specific security controls by misclassifying chat types.

Vulnerability Details

CVE-ID: CVE-2026-32924

Affected Software: OpenClaw

Affected Versions: Versions before 2026.3.12

Vulnerability: The vulnerability occurs when Feishu reaction events omit the chat_type field, leading OpenClaw to misclassify them as peer-to-peer (p2p) conversations. Attackers can exploit this logic error to bypass groupAllowFrom and requireMention protections that are only enforced for group chats.

Business Impact

By bypassing group-specific authorization, an attacker can interact with the agent in ways that should be restricted, potentially leading to unauthorized information disclosure or command execution within a group context. The CVSS score of 9.8 reflects the high severity of bypassing these fundamental security boundaries.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.12 or later to ensure that reaction events are correctly classified and security policies are strictly enforced.

Proactive Monitoring: Review Feishu integration logs for reaction events missing chat_type and audit agent interactions that may have bypassed group restrictions.

Compensating Controls: Implement secondary validation layers for sensitive agent commands that require explicit user confirmation regardless of the chat type.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 29, 2026, there is no public information indicating active exploitation. The logic flaw is specific to the Feishu reaction event handling but represents a significant bypass of the intended authorization model.

Analyst Recommendation

Authorization bypasses involving message classification can lead to subtle but dangerous security failures. Organizations using OpenClaw with Feishu must apply the 2026.3.12 update immediately to ensure all security protections are active across all chat types.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions before 2026.3.11
---END_METADATA---

Description Summary:
A privilege escalation vulnerability in OpenClaw's token rotation mechanism allows users with limited pairing scopes to mint high-privilege administrative tokens and achieve remote code execution.

Executive Summary:
OpenClaw versions prior to 2026.3.11 contain a critical privilege escalation flaw that allows authenticated attackers to gain administrative control and execute remote code on connected nodes.

Vulnerability Details

CVE-ID: CVE-2026-32922

Affected Software: OpenClaw

Affected Versions: Versions before 2026.3.11

Vulnerability: The device.token.rotate function fails to properly constrain newly minted scopes to the caller's existing permissions. This allows an authenticated attacker with operator.pairing scope to escalate their privileges to operator.admin, subsequently enabling remote code execution via the system.run function.

Business Impact

This vulnerability poses a severe risk to organizational security, as it allows a low-privileged user to seize full control of the OpenClaw gateway and connected nodes. The CVSS score of 9.9 reflects the high impact on system integrity and the potential for complete unauthorized access to sensitive operational environments.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.11 or later to ensure that token rotation strictly adheres to scope constraints.

Proactive Monitoring: Audit all recently minted tokens and review audit logs for any instances of operator.pairing users successfully invoking administrative functions or the system.run command.

Compensating Controls: Implement strict identity and access management (IAM) policies and utilize a least-privilege model to limit the number of users with pairing capabilities.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 29, 2026, there is no public information indicating active exploitation of this vulnerability. The technical complexity is low for an authenticated user, making the likelihood of exploitation significant once the vulnerability is known.

Analyst Recommendation

This privilege escalation vulnerability is a critical threat to the OpenClaw ecosystem. Administrators must apply the latest security patches immediately to prevent attackers from bypassing authorization controls and gaining full remote code execution capabilities across the network.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Before 2026.3.13
---END_METADATA---

Description Summary:
OpenClaw contains a remote command injection vulnerability in the iMessage attachment staging flow. Unsanitized SCP paths allow attackers to execute commands on remote hosts.

Executive Summary:
Attackers can execute arbitrary commands on remote servers configured with OpenClaw by sending a malicious iMessage attachment, leading to full remote system compromise.

Vulnerability Details

CVE-ID: CVE-2026-32917

Affected Software: OpenClaw

Affected Versions: Before 2026.3.13

Vulnerability: A remote command injection vulnerability exists in the iMessage attachment staging flow. Unsanitized attachment paths containing shell metacharacters are passed directly to an SCP command. An unauthenticated attacker can craft a path that executes arbitrary commands on the remote host when attachment staging is enabled.

Business Impact

This vulnerability allows for the complete takeover of servers used for iMessage staging. Attackers can gain persistent access, exfiltrate private messages, and move laterally to other systems in the network. The CVSS score of 9.8 reflects the high severity of unauthenticated remote command execution on critical communication infrastructure.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.13 or later immediately. If patching is not possible, disable the remote attachment staging feature.

Proactive Monitoring: Monitor remote hosts for suspicious scp or ssh processes and inspect system logs for unusual file paths containing shell characters like ;, &, or |.

Compensating Controls: Implement strict SSH key management and limit the commands that the OpenClaw user can execute on remote hosts using rssh or similar restricted shell environments.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of March 31, 2026, there is no public information indicating active exploitation. The vulnerability is highly critical because it can be triggered remotely through the standard iMessage flow.

Analyst Recommendation

Command injection via SCP operands is a well-understood but devastating flaw. Organizations relying on OpenClaw for message staging must prioritize the update to version 2026.3.13. Until the patch is applied, the remote staging feature should be considered unsafe and disabled.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: 2026.3.7 before 2026.3.11
---END_METADATA---

Description Summary:
OpenClaw versions before 2026.3.11 contain an unauthenticated authorization bypass allowing remote attackers to execute privileged gateway actions via synthetic operator clients.

Executive Summary:
A critical authorization bypass in OpenClaw allows unauthenticated remote attackers to perform administrative actions, including session deletion and agent execution, posing a severe risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-32916

Affected Software: OpenClaw

Affected Versions: 2026.3.7 before 2026.3.11

Vulnerability: This flaw involves an authorization bypass within plugin subagent routes that utilize a synthetic operator client with excessive administrative scopes. Remote unauthenticated attackers can target these routes to invoke runtime methods and perform privileged actions without valid credentials.

Business Impact

A successful exploit allows an external actor to gain administrative control over gateway functions, leading to unauthorized session termination or malicious agent execution. Given the CVSS score of 9.4, this vulnerability represents a critical threat that could result in total system compromise, data loss, and significant operational downtime. The ability for unauthenticated users to bypass security controls necessitates immediate remediation.

Remediation Plan

Immediate Action: Administrators must upgrade OpenClaw to version 2026.3.11 or later immediately to patch the vulnerable subagent routing logic.

Proactive Monitoring: Security teams should review gateway access logs for unusual requests to plugin-owned routes and monitor for unauthorized agent execution or unexpected session terminations.

Compensating Controls: Implementing strict IP whitelisting for gateway access and deploying a Web Application Firewall (WAF) to filter suspicious runtime method calls can provide temporary protection.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 31, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the unauthenticated access vector, the potential for exploitation is extremely high.

Analyst Recommendation

The severity of this authorization bypass cannot be overstated, as it grants administrative-level access to unauthenticated remote users. Organizations using affected versions of OpenClaw must prioritize the application of the official vendor patch immediately. Failure to update leaves the infrastructure vulnerable to complete takeover and persistent unauthorized access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Before 2026.3.7
---END_METADATA---

Description Summary:
OpenClaw fails to properly validate headers during cross-origin redirects, leading to the leakage of sensitive authorization headers like API keys to untrusted destinations.

Executive Summary:
A critical header validation vulnerability in OpenClaw allows attackers to intercept sensitive API keys and authorization tokens by triggering cross-origin redirects.

Vulnerability Details

CVE-ID: CVE-2026-32913

Affected Software: OpenClaw

Affected Versions: Before 2026.3.7

Vulnerability: The fetchWithSsrFGuard function contains an improper header validation flaw. When a request is redirected to a different origin, the system fails to strip sensitive custom headers (e.g., X-Api-Key, Private-Token), forwarding them to the new, potentially malicious destination.

Business Impact

The leakage of administrative API keys and private tokens can lead to full account takeover and unauthorized access to the OpenClaw environment. Attackers can intercept these credentials by inducing a redirect to a server they control. With a CVSS score of 9.3, this vulnerability represents a critical risk to the confidentiality of system credentials and integrated third-party services.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.7 or later to ensure that sensitive headers are properly stripped during cross-origin redirects.

Proactive Monitoring: Review logs for unusual outbound requests or redirects to unknown domains, especially those initiated by automated processes or internal fetch functions.

Compensating Controls: Rotate all API keys and private tokens that may have been exposed through cross-origin requests prior to the patch application.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 23, 2026, there is no public information indicating active exploitation. This type of vulnerability is often exploited in complex attack chains involving user-generated content or open redirects.

Analyst Recommendation

The exposure of authentication secrets is a critical security failure. It is imperative to update OpenClaw to the patched version immediately. Furthermore, security teams should treat any existing API keys as potentially compromised and perform a full credential rotation after the update is complete.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Nextcloud Talk plugin
AFFECTED_VERSIONS: Versions prior to 2026.2.6
---END_METADATA---

Description Summary:
OpenClaw's Nextcloud Talk plugin uses mutable display names for allowlist validation. Attackers can bypass access controls by changing their display name to match an allowlisted ID.

Executive Summary:
The OpenClaw Nextcloud Talk plugin contains a critical logic flaw that allows attackers to bypass conversation allowlists and gain unauthorized access to restricted chats.

Vulnerability Details

CVE-ID: CVE-2026-28474

Affected Software: OpenClaw Nextcloud Talk plugin

Affected Versions: Versions prior to 2026.2.6

Vulnerability: The plugin performs allowlist validation by checking the mutable actor.name field (display name) instead of a unique, immutable user ID. An attacker can change their display name to match a known authorized user, tricking the system into granting access to restricted Direct Messages (DM) and chat rooms.

Business Impact

This flaw allows for unauthorized access to sensitive internal communications. Confidential business discussions, credentials shared in chat, and private user data could be exposed to unauthorized parties. The CVSS score of 9.8 underscores the total failure of the authorization mechanism within the plugin.

Remediation Plan

Immediate Action: Update the OpenClaw Nextcloud Talk plugin to version 2026.2.6 or later, which implements validation based on immutable user identifiers.

Proactive Monitoring: Review Nextcloud audit logs for frequent display name changes followed by access to restricted chat rooms.

Compensating Controls: Disable the ability for users to change their own display names within Nextcloud until the patch is applied, or implement secondary authentication for sensitive rooms.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 5, 2026, there is no public information indicating active exploitation. However, this is a trivial logic bypass that requires very little technical skill to execute.

Analyst Recommendation

Relying on user-controlled fields for security validation is a critical design error. Administrators must apply the update immediately to ensure that chat room access is governed by secure, immutable IDs. Prioritize this update to protect the confidentiality of organizational communications.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw AI Assistant
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The OpenClaw personal AI assistant contains a vulnerability that could allow for unauthorized access to personal data or the execution of unintended commands.

Executive Summary:
A high-severity vulnerability in OpenClaw poses a risk to user privacy and the security of the host system through potential unauthorized interactions.

Vulnerability Details

CVE-ID: CVE-2026-27487

Affected Software: OpenClaw

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: OpenClaw is a personal AI assistant. The vulnerability may involve improper handling of user prompts or insecure integration with the underlying operating system, potentially allowing an attacker to bypass intended restrictions.

Business Impact

For individuals or organizations using AI assistants, this flaw could lead to the exposure of private conversations, personal data, or the execution of malicious scripts on the user's device. The CVSS score of 7.6 reflects a significant risk to data integrity and user privacy.

Remediation Plan

Immediate Action: Update the OpenClaw application to the latest version to ensure all security patches are applied.

Proactive Monitoring: Monitor the application's activity logs for any unusual commands or data access patterns that were not initiated by the user.

Compensating Controls: Run the AI assistant in a restricted user environment or container to limit its access to the broader host system.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 22, 2026, there is no public information indicating active exploitation. As AI assistants gain more system-level access, the impact of such vulnerabilities increases significantly.

Analyst Recommendation

Users should be cautious about the permissions granted to AI assistants. It is essential to keep the OpenClaw software updated and to monitor its behavior to prevent unauthorized data access or system manipulation.

Executive Summary:
A critical vulnerability has been identified in multiple OpenClaw products, assigned CVE-2026-25253 with a CVSS score of 8.8 (High). This flaw allows an unauthenticated remote attacker to execute arbitrary code, potentially leading to a complete system compromise. Organizations are urged to apply the vendor-supplied security updates immediately to prevent data theft, service disruption, and further network intrusion.

Vulnerability Details

CVE-ID: CVE-2026-25253

Affected Software: OpenClaw Multiple Products

Affected Versions: All versions of OpenClaw (aka clawdbot or Moltbot) released before 2026.

Vulnerability: This vulnerability is a remote code execution (RCE) flaw within the core processing engine of the OpenClaw software. A lack of proper input sanitization allows an unauthenticated attacker to send a specially crafted network request to the affected service. Successful exploitation enables the attacker to execute arbitrary commands on the underlying operating system with the privileges of the OpenClaw service account, leading to a full compromise of the host system.

Business Impact

This vulnerability is rated as High severity with a CVSS score of 8.8. Successful exploitation could have a significant negative impact on the business. An attacker could exfiltrate sensitive corporate data, deploy ransomware, disrupt critical services reliant on OpenClaw, or use the compromised system as a beachhead to launch further attacks against the internal network. The potential consequences include financial loss, reputational damage, and regulatory penalties depending on the data compromised.

Remediation Plan

Immediate Action:

1. Identify all instances of vulnerable OpenClaw software within the environment.
2. Apply the security updates provided by the vendor, OpenClaw, immediately across all identified systems.
3. After patching, review system and application access logs for any signs of compromise or anomalous activity preceding the update.

Proactive Monitoring:

• Monitor network traffic to and from affected servers for unusual patterns or connections from untrusted IP addresses.
• Review application logs for malformed requests or error messages that could indicate failed or successful exploitation attempts.
• Implement host-based monitoring to detect the creation of unexpected files, processes, or outbound network connections from the OpenClaw servers.

Compensating Controls:
If immediate patching is not feasible, implement the following controls to reduce risk:

• Restrict network access to the vulnerable OpenClaw services using a firewall, allowing connections only from trusted, authorized IP addresses.
• Deploy a Web Application Firewall (WAF) or Intrusion Prevention System (IPS) with rules or signatures designed to detect and block exploitation attempts against this specific vulnerability (virtual patching).
• Ensure the OpenClaw service is running with the lowest possible user privileges to limit the impact of a potential compromise.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 2, 2026, there is no known public proof-of-concept exploit code, and no active exploitation has been reported in the wild. However, due to the high severity and relative simplicity of exploiting similar vulnerabilities, it is highly likely that threat actors will develop an exploit in the near future.

Analyst Recommendation

Given the high CVSS score of 8.8, this vulnerability presents a critical risk to the organization. The immediate priority must be to apply the vendor-provided security patches to all affected systems. Although this CVE is not currently on the CISA KEV list, vulnerabilities with these characteristics are prime candidates for future inclusion once exploitation becomes widespread. Organizations should treat this vulnerability with the utmost urgency and proceed with the remediation plan without delay to prevent a potential compromise.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The OpenClaw personal AI assistant contains a high-severity vulnerability that could allow for unauthorized access or system manipulation.

Executive Summary:
A significant security flaw in the OpenClaw AI assistant could permit attackers to compromise the privacy and integrity of the user's personal assistant environment.

Vulnerability Details

CVE-ID: CVE-2026-25157

Affected Software: OpenClaw

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability in OpenClaw, a personal AI assistant, likely involves improper input validation or an authentication bypass. Given the CVSS score of 7.7, an unauthenticated or low-privileged attacker could potentially gain unauthorized access to the assistant's data or control its functions.

Business Impact

The impact of this vulnerability is high, as personal AI assistants often have access to sensitive user data, including schedules, communications, and integrated third-party accounts. A compromise could lead to significant privacy breaches, data exfiltration, and unauthorized actions performed on behalf of the user, resulting in severe personal or organizational risk.

Remediation Plan

Immediate Action: Apply the latest security patches for the OpenClaw assistant and review the assistant's permissions and integrated accounts for any signs of tampering.

Proactive Monitoring: Review access logs for the OpenClaw service to identify any connections from unrecognized IP addresses or unusual command patterns.

Compensating Controls: Isolate the AI assistant within a dedicated network segment and limit its access to sensitive internal resources until the patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 5, 2026, there is no public information indicating active exploitation of this vulnerability. AI assistants are increasingly targeted due to the wealth of information they process.

Analyst Recommendation

Users and administrators of OpenClaw should prioritize the application of this security update. Given the high CVSS score and the sensitive nature of AI assistant data, immediate remediation is required to prevent unauthorized access to personal and corporate information.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw AI Assistant
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A vulnerability in the OpenClaw (formerly Clawdbot) personal AI assistant could allow an attacker to compromise the host device or access private data.

Executive Summary:
The OpenClaw AI assistant contains a high-severity vulnerability that could lead to unauthorized access or full compromise of the user's personal device.

Vulnerability Details

CVE-ID: CVE-2026-24763

Affected Software: OpenClaw OpenClaw AI Assistant

Affected Versions: See vendor advisory for affected versions

Vulnerability: While the specific technical flaw is not detailed in the summary, the vulnerability in the OpenClaw AI assistant likely involves improper handling of user inputs or remote requests. This could allow an attacker to execute code or access the underlying file system of the device running the assistant.

Business Impact

The CVSS score of 8.8 indicates a high severity. Since OpenClaw is designed to run on personal devices with access to private data, a compromise could result in the theft of sensitive personal information, credentials, or the use of the device as a bot in a larger network. This represents a significant privacy and security risk to individual users.

Remediation Plan

Immediate Action: Update the OpenClaw software to the latest available version immediately to apply necessary security patches.

Proactive Monitoring: Monitor device network traffic for unusual outbound connections to unknown IP addresses, which could indicate a compromise.

Compensating Controls: Run the AI assistant in a containerized or sandboxed environment to limit its access to the rest of the host operating system and sensitive files.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 3, 2026, there is no public information indicating active exploitation of this vulnerability. AI assistants often have broad permissions, making them attractive targets for exploitation.

Analyst Recommendation

Users of OpenClaw should prioritize updating their installations. Given the high CVSS score, the risk of exploitation is significant. Ensuring the software is updated and running with the minimum necessary permissions is critical for maintaining device security.