CVE-2026-110689 MEDIUM 4.8 Clawscan — A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTarg…● PoC 2026-10-14 CVE-2026-101879 HIGH 7.1 Openclaw Windows Node — OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture …● PoC 2026-09-30 CVE-2026-101880 HIGH 8.7 Openclaw Windows Node — OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec…● PoC 2026-09-30 CVE-2026-101881 HIGH 7.1 Openclaw Windows Node — OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the …● PoC 2026-09-30 CVE-2026-101882 HIGH 8.7 Openclaw Windows Node — OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.…● PoC 2026-09-30 CVE-2026-101883 MEDIUM 5.3 Openclaw Windows Node — OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.pres…● PoC 2026-09-30 CVE-2026-101884 HIGH 7.7 Openclaw Windows Node — OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that…● PoC 2026-09-30 CVE-2026-102806 MEDIUM 6 Openclaw — OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root a… 2026-09-29 CVE-2026-102807 MEDIUM 6 Openclaw — OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that all… 2026-09-29 CVE-2026-100525 MEDIUM 5.3 Diagnostics Prometheus — The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not… 2026-09-26 CVE-2026-100526 MEDIUM 6 Discord — OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-s… 2026-09-26 CVE-2026-100527 MEDIUM 6.9 Openclaw — OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows… 2026-09-26 CVE-2026-100528 MEDIUM 5.9 Openclaw — OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong end… 2026-09-26 CVE-2026-100529 HIGH 7.4 Openclaw — OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow… 2026-09-26 CVE-2026-100530 HIGH 8.5 Openclaw — OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing … 2026-09-26 CVE-2026-100531 HIGH 7.1 Slack — The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file hand… 2026-09-26 CVE-2026-100532 HIGH 7.2 Whatsapp — @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path… 2026-09-26 CVE-2026-100533 MEDIUM 6 Openclaw — OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature… 2026-09-26 CVE-2026-100534 LOW 2.3 Openclaw — OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellati… 2026-09-26 CVE-2026-100535 HIGH 7.7 Openclaw — OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's res… 2026-09-26 CVE-2026-100536 HIGH 7.1 Openclaw — OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowi… 2026-09-26 CVE-2026-100537 LOW 2.3 Openclaw — OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool po… 2026-09-26 CVE-2026-100538 HIGH 7.1 Openclaw — OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent … 2026-09-26 CVE-2026-100539 LOW 2.1 Openclaw — OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disa… 2026-09-26 CVE-2026-100540 HIGH 7.6 Feishu — OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before sele… 2026-09-26 CVE-2026-100541 HIGH 7.7 Matrix — OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase com… 2026-09-26 CVE-2026-100542 LOW 2.3 Openclaw — OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.b… 2026-09-26 CVE-2026-100543 HIGH 7.7 Openclaw — OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over the original,… 2026-09-26 CVE-2026-100544 HIGH 8.7 Voice Call — openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voic… 2026-09-26 CVE-2026-100545 MEDIUM 6 Openclaw — OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during session-mem… 2026-09-26 CVE-2026-100546 MEDIUM 6.1 Openclaw — OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord … 2026-09-26 CVE-2026-100547 MEDIUM 6.8 Openclaw — OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2… 2026-09-26 CVE-2026-100548 MEDIUM 6 Openclaw — OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential exposure issue in … 2026-09-26 CVE-2026-100549 MEDIUM 5.3 Openclaw — OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling wh… 2026-09-26 CVE-2026-100550 MEDIUM 5.3 Openclaw — OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams int… 2026-09-26 CVE-2026-100551 CRITICAL 9 Openclaw — OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI.… 2026-09-26 CVE-2026-100552 HIGH 8.7 Openclaw — OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool policies for Codex … 2026-09-26 CVE-2026-100553 MEDIUM 5.3 Openclaw — OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target i… 2026-09-26 CVE-2026-100554 LOW 2.3 Openclaw — OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HT… 2026-09-26 CVE-2026-100555 HIGH 7.1 Openclaw — OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat atta… 2026-09-26 CVE-2026-100556 MEDIUM 5.3 Openclaw — OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnera… 2026-09-26 CVE-2026-100557 HIGH 8.7 Openclaw — OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fa… 2026-09-26 CVE-2026-100558 HIGH 8.7 Openclaw — OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that all… 2026-09-26 CVE-2026-100559 HIGH 8.6 Openclaw — OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec a… 2026-09-26 CVE-2026-100560 HIGH 7.7 Openclaw — OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals f… 2026-09-26 CVE-2026-100561 HIGH 8.6 Openclaw — OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the … 2026-09-26 CVE-2026-100562 MEDIUM 5.3 Openclaw — OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoin… 2026-09-26 CVE-2026-100563 MEDIUM 5.3 Openclaw — OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet appl… 2026-09-26 CVE-2026-100564 MEDIUM 5.3 Openclaw — OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display nam… 2026-09-26 CVE-2026-100566 MEDIUM 6.9 Line — OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode sile… 2026-09-26 CVE-2026-100567 HIGH 8.9 Openclaw — OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 and < 2026.8.1… 2026-09-26 CVE-2026-100568 HIGH 8.7 Openclaw — OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing mod… 2026-09-26 CVE-2026-100569 MEDIUM 6.8 Openclaw — OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment… 2026-09-26 CVE-2026-100570 HIGH 8.5 Openclaw — OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace .env file … 2026-09-26 CVE-2026-100571 MEDIUM 6.9 Openclaw — OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request ra… 2026-09-26 CVE-2026-100572 MEDIUM 6.9 Openclaw — OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks bef… 2026-09-26 CVE-2026-100573 MEDIUM 4.8 Openclaw — OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component … 2026-09-26 CVE-2026-100574 HIGH 8.2 Openclaw — OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its … 2026-09-26 CVE-2026-100575 HIGH 8.7 Slack — OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct mess… 2026-09-26 CVE-2026-100576 MEDIUM 5.3 Openclaw — OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicat… 2026-09-26 CVE-2026-100577 MEDIUM 5.3 Openclaw — OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-sid… 2026-09-26 CVE-2026-100578 HIGH 7.2 Openclaw — OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure tools exposed th… 2026-09-26 CVE-2026-100579 HIGH 7.2 Openclaw — OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message.action. I… 2026-09-26 CVE-2026-100580 HIGH 8.7 Openclaw — OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron… 2026-09-26 CVE-2026-100581 MEDIUM 6.8 Openclaw — OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults inste… 2026-09-26 CVE-2026-100582 HIGH 7.1 Msteams — OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) bef… 2026-09-26 CVE-2026-100583 MEDIUM 5.3 Discord — OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read… 2026-09-26 CVE-2026-100584 MEDIUM 5.4 Openclaw — OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command anal… 2026-09-26 CVE-2026-100585 HIGH 8.6 Openclaw — OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement fo… 2026-09-26 CVE-2026-100586 HIGH 8.7 Openclaw — OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation… 2026-09-26 CVE-2026-100587 HIGH 8.7 Openclaw — OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use inst… 2026-09-26 CVE-2026-100588 HIGH 8.7 Openclaw — OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on brow… 2026-09-26 CVE-2026-100589 HIGH 8.7 Openclaw — OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandb… 2026-09-26 CVE-2026-100590 MEDIUM 5.3 Openclaw — OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows … 2026-09-26 CVE-2026-100591 MEDIUM 5.3 Openclaw — OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mut… 2026-09-26 CVE-2026-100592 MEDIUM 5.3 Openclaw — OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory d… 2026-09-26 CVE-2026-100593 MEDIUM 5.3 Openclaw — OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for p… 2026-09-26 CVE-2026-100594 HIGH 7.1 Openclaw — OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endp… 2026-09-26 CVE-2026-100595 HIGH 7.1 Openclaw — OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export comm… 2026-09-26 CVE-2026-100596 HIGH 8.7 Openclaw — OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration chang… 2026-09-26 CVE-2026-100597 HIGH 8.8 Openclaw — OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition … 2026-09-26 CVE-2026-100598 HIGH 7.5 Openclaw — OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In affected versi… 2026-09-26 CVE-2026-100599 HIGH 8.7 Openclaw — OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet nod… 2026-09-26 CVE-2026-100600 MEDIUM 6.9 Clawhub — ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted call… 2026-09-26 CVE-2026-100601 MEDIUM 6.9 Clawhub — ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the pub… 2026-09-26 CVE-2026-100602 HIGH 7.1 Clawhub — ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview… 2026-09-26 CVE-2026-100603 HIGH 8.7 Clawhub — ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four disti… 2026-09-26 CVE-2026-100604 MEDIUM 5.3 Clawhub — ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backen… 2026-09-26 CVE-2026-95815 HIGH 7.2 Openclaw Ios — OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified l… 2026-09-22 CVE-2026-91835 LOW 2.4 Clawscan — A vulnerability was detected in OpenClaw ClawScan up to 0.1.6. The impacted element is the function IsBinaryFi…● PoC 2026-09-15 CVE-2026-91836 LOW 2.4 Clawscan — A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/…● PoC 2026-09-15