CVE-2026-22172

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-22172

OpenClaw is affected: versions prior to 2026.3.12 contain an authorization bypass in the WebSocket connect path. The flaw lets shared-token or password-authenticated connections self-declare elevated scopes without server-side binding, enabling unauthorized scopes such as operator.admin and poten...

CVE-2026-22172 OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections

OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated connections to self-declare elevated scopes without server-side binding. Attackers can exploit this logic flaw to present unauthorize...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: glab, ferretdb, datadog-agent, opencost, jaeger, osv-scanner...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: glab, ferretdb, datadog-agent, opencost, jaeger, osv-scanner...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: glab, ferretdb, datadog-agent, opencost, jaeger, osv-scanner...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: livekit-cli, ferretdb, osv-scanner, datadog-agent, jaeger, datadog-agent-fips, opencost, flux-operator-fips, opencost-fips, gitlab-workhorse-ce-fips, glab, flux-operator, gitlab-workhorse-ce, jaeger-fips...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: livekit-cli, ferretdb, osv-scanner, datadog-agent, jaeger, datadog-agent-fips, opencost, flux-operator-fips, opencost-fips, gitlab-workhorse-ce-fips, glab, flux-operator, gitlab-workhorse-ce, jaeger-fips...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: livekit-cli, ferretdb, osv-scanner, datadog-agent, jaeger, datadog-agent-fips, opencost, flux-operator-fips, opencost-fips, gitlab-workhorse-ce-fips, glab, flux-operator, gitlab-workhorse-ce, jaeger-fips...

ai.ancf.lmos:arc-runner (0.114.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +1725 more potentially affected by CVE-2026-22731 via org.springframework.boot:spring-boot-starter-actuator (>=3.4.0, <=3.4.13)

org.springframework.boot:spring-boot-starter-actuator MAVEN version =3.4.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.1, =0.1.0, =0.8.2 - cc.zzzyu.nacos:nacos-ai 3.1.1 and more Source cves: CVE-2026-22731 Source advisory: OSV:GHSA-8HFC-FQ58-R6...

ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.114.0, <=0.120.0), ai.ancf.lmos:arc-runner (>=0.114.0, <=0.120.0) +2199 more potentially affected by CVE-2026-22735 via org.springframework:spring-webflux (>=6.2.0, <=6.2.16)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-22735 Source advisory: MEND:CVE-2026-22735...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025 OpenClaw < 2026.2.25 - Password Brute-Force via Browser-Origin WebSocket Authentication Bypass

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-32025

OpenClaw versions prior to 2026.2.25 expose an authentication hardening gap in browser-origin WebSocket clients that bypasses origin checks and auth throttling on loopback deployments. An attacker enticed to visit a malicious page can perform password brute-force against the gateway to establish ...

EUVD-2026-13298

OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth throttling on loopback deployments. An attacker can trick a user into opening a malicious webpage and perform password brute-forc...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, k6, podinfo, vitess, migrate, neuvector-sigstore-interface, grafana-image-renderer, oauth2-proxy, terraform-provider-tls, timestamp-authority, spire-server, envoy-gateway, terraform-provider-time, grpc-health-probe, dapr,...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, k6, podinfo, vitess, migrate, neuvector-sigstore-interface, grafana-image-renderer, oauth2-proxy, terraform-provider-tls, timestamp-authority, spire-server, envoy-gateway, terraform-provider-time, grpc-health-probe, dapr,...

Duplicate Advisory: OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5f9p-f3w2-fwch. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app...

GHSA-G87J-GM7P-6VW2 Duplicate Advisory: OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h3rm-6x7g-882f. This link is maintained to preserve external references. Original Description OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting...

EUVD-2026-13016

OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting changes command semantics. Attackers can place malicious local scripts in the working directory to execute unintended code despite operator approval of different command text...